Senior Associate, Compliance

📋 Description

• Supporting HITRUST, SOC 2, HIPAA-related, and other compliance audits and assessments from planning
• Reviewing audit criteria, control requirements, prior-year findings, and auditor requests to
• Coordinating evidence collection with control owners across Information Security, Engineering
• Gathering, organizing, naming, tracking, and quality-checking evidence to ensure it is complete
• Preparing evidence packages, control narratives, management responses, and supporting documentation
• Managing audit request lists, project plans, due dates, status reporting, action-item logs, and

🎯 Requirements

• 4-7 years of experience in IT audit, compliance, information security, privacy, risk management
• Familiarity with compliance frameworks, control testing, audit evidence, and common security and
• Exposure to HITRUST, SOC 2, HIPAA, NIST, ISO 27001, or similar frameworks and assessment processes
• Experience gathering and reviewing evidence such as policies, procedures, tickets, access reviews
• Strong project management skills, including the ability to manage multiple requests, dependencies
• Excellent written and verbal communication skills, with the ability to explain requirements clearly

🎁 Benefits

• An incredible team of smart and supportive people
• A competitive compensation package, including attractive medical insurance
• Amazing perks – think catered lunch every day, Ping Pong, etc.
• Daycare reimbursement
• The chance to create a better healthcare experience for millions of patients!
• Cellphone and wifi reimbursement