CA Compliance Analyst

Hubnest Inc.; California; In loco; USD 120.000 - 170.000; Tempo pieno

Vantaggi offerti da questo lavoro

Health coverage

Flexible work

Learning budget

PTO & holidays

Descrizione del lavoro

Hubnest Inc. is seeking a Compliance Analyst to ensure our platforms meet HIPAA, SOC 2, and GDPR requirements for civic, healthcare, and enterprise clients.

You will build and enforce policies that maintain trust and data integrity across our products. You will collaborate with engineering and product teams to translate regulatory requirements into actionable software requirements and manage the vendor risk program.

Competenze

• 4+ years of professional experience in IT compliance, tech risk management, or information security auditing.
• 2+ years managing compliance programs for SaaS or cloud-native companies.
• Deep knowledge of SOC 2 criteria, HIPAA/privacy and security rules, and GDPR/CCPA frameworks.
• Experience leading SOC 2 Type II or ISO 27001 certification audits.
• Exceptional technical writing skills for policies and audit responses.
• Strong analytical ability to interpret legal/regulatory texts for technical architectures.
• Experience with GRC platforms like Vanta/Drata/Secureframe.
• Ability to collaborate with engineering teams.

Mansioni

• Monitor and document platforms for HIPAA, SOC 2, and GDPR compliance.
• Conduct internal audits and risk assessments across products.
• Translate regulatory requirements into actionable software requirements with teams.
• Manage vendor risk evaluating third-party tools.
• Draft and update internal security policies and SOPs.
• Lead external audits including SOC 2 Type II.
• Develop compliance, privacy, and security training for employees.
• Investigate and report internal compliance violations or data breaches.
• Review contracts and BAA to ensure obligations are met.
• Implement automated compliance monitoring tools and dashboards.
• Stay current on evolving data privacy laws affecting verticals.
• Serve as internal point of contact for data handling inquiries.

Conoscenze

IT compliance

Tech risk

InfoSec auditing

SOC 2

HIPAA

GDPR/CCPA

Technical writing

Regulatory analysis

Vendor risk

Formazione

Bachelor/BSc in Information Systems or related

Strumenti

Vanta

Drata

Secureframe

Descrizione del lavoro

Hubnest builds vertical specific product engines for industries that require high operational precision. Founded in 2014, the company has spent twelve years embedded in the operational realities of the industries it serves, developing four purpose built products used by organizations across field services, political and civic operations, continuing care, and enterprise security.

The Compliance Analyst ensures that Hubnest's operational platforms adhere to the regulatory requirements of our civic, healthcare, and enterprise clients. You will build and enforce the policies that maintain trust and data integrity across our products.

What You Will Be Doing

• Monitor, assess, and document Hubnest's software platforms for compliance with HIPAA, SOC 2, and GDPR standards.
• Conduct internal audits and risk assessments across our continuing care, enterprise security, and civic products.
• Collaborate with engineering and product teams to translate regulatory requirements into actionable software requirements.
• Manage the vendor risk management program, evaluating the security and compliance posture of all third-party tools.
• Draft, review, and update internal security policies, standard operating procedures, and compliance documentation.
• Lead the preparation and execution of external compliance audits including annual SOC 2 Type II audits.
• Develop and deliver compliance, data privacy, and security awareness training programs for all Hubnest employees.
• Investigate, document, and report any internal compliance violations, security incidents, or data breaches.
• Review client contracts and Business Associate Agreements to ensure Hubnest can meet stipulated compliance obligations.
• Implement automated compliance monitoring tools and dashboards to track regulatory adherence.
• Stay current on emerging state, federal, and international data privacy laws that impact our vertical markets.
• Serve as the primary internal point of contact for all employee inquiries regarding data handling and privacy protocols.

What We Are Looking For

• 4+ years of professional experience in IT compliance, tech risk management, or information security auditing.
• 2+ years of direct experience managing compliance programs for SaaS or cloud-native technology companies.
• Deep, working knowledge of SOC 2 criteria, HIPAA privacy and security rules, and GDPR/CCPA frameworks.
• Proven experience successfully leading an organization through a SOC 2 Type II or ISO 27001 certification audit.
• Exceptional technical writing skills for drafting clear, unambiguous policies and audit responses.
• Strong analytical capabilities with the ability to interpret legal and regulatory texts and apply them to technical architecture.
• Experience using Governance, Risk, and Compliance software platforms such as Vanta, Drata, or Secureframe.
• Ability to collaborate effectively with technical engineering teams.
• Meticulous attention to detail and strong organizational skills.
• Professional certifications such as CISA, CISSP, CISM, or CIPP are required.
• Bachelor's degree in Information Systems, Cybersecurity, Business, or Pre-Law.

What We Offer

• Competitive compensation commensurate with experience
• Comprehensive health, dental, and vision coverage
• Flexible working arrangements
• Learning and development budget
• Paid time off and statutory holidays

Equal Opportunity Employment

Hubnest is an equal opportunity employer. We do not discriminate on the basis of race, color, religion, sex, national origin, age, disability, genetic information, or any other characteristic protected by applicable federal, state, or local law.