AI Compliance & Audit Leader

Mpathic; United States; On-site; USD 140,000 - 180,000; Full time

Job summary

mpathic is seeking a Senior Manager, Compliance & Audit to own and scale the governance program for SOC 1, SOC 2, ISO 27001, ISO 42001, and Part 11 across its SaaS platforms. You will partner with engineering, security, product, and operations to translate requirements into practical controls and automated evidence.

You’ll drive risk-based validation, manage external audits, and oversee regulatory monitoring to keep compliance ahead of AI governance demands.

Qualifications

• 7+ years in IT compliance, GRC, audit, or CV validation with external audits ownership.
• Hands-on Part 11 and GxP data integrity for software or SaaS systems with audit trails.
• Experience leading SOC 1/2 and ISO 27001 examinations or certifications.
• Familiar with cloud configurations (AWS/GCP/Azure) and IAM controls in practice.
• Certifications such as CISA, ISO 27001 Lead Auditor or CISSP are a plus.

Responsibilities

• Plan and run the annual audit and certification cycle for SOC 1, SOC 2, ISO/IEC 27001, ISO/IEC 42001, and Part 11 readiness.
• Own Part 11 compliance for systems creating, modifying, or storing regulated records.
• Maintain a unified control framework across frameworks to avoid duplication.
• Run a risk-based internal audit program and track CAPAs to closure.
• Partner with engineering to automate evidence collection and controls into CI/CD.
• Monitor control health and drive remediation with cross-functional owners.
• Maintain ISO 42001 AI management system with risk assessments and governance.
• Respond to customer security questionnaires and audits; strengthen trust center.
• Own GRC tooling, policy workflows, and regulatory monitoring.
• Deliver Part 11 and GxP training for employees handling regulated systems.

Skills

IT compliance

GRC

Audit

FDA Part 11

Validation

SOC 1/2

ISO27001

AI governance

Cloud security

Internal audit

Policy writing

Certifications

Job description

mpathic is seeking a Senior Manager, Compliance & Audit to own and scale the governance program for SOC 1, SOC 2, ISO 27001, ISO 42001, and Part 11 across its SaaS platforms. You will partner with engineering, security, product, and operations to translate requirements into practical controls and automated evidence.

You’ll drive risk-based validation, manage external audits, and oversee regulatory monitoring to keep compliance ahead of AI governance demands.