Director of Compliance

Athelas; Mountain View (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

Commure, Inc. is seeking a Director of Compliance to design, oversee, and continuously improve the corporate compliance program in health IT.

You will report to the Chief Legal Officer and advise senior leadership on regulatory risk and ethics across the organization. Responsibilities include policy development, risk assessments, training, and monitoring, with a focus on HIPAA, HITECH, FDA SaMD, and data privacy.

Qualifications

• Bachelor’s degree required; JD or related master’s preferred.
• Strong leadership in a regulatory/compliance function.
• Deep knowledge of HIPAA, HITECH, data privacy laws and industry standards.
• Experience shaping, implementing, and auditing corporate compliance programs.
• Excellent verbal and written communication skills.
• Ability to operate in a fast-paced health-tech environment.

Responsibilities

• Design, oversee, and monitor the corporate compliance program.
• Lead the Corporate Compliance Committee with cross-functional input.
• Develop and maintain policies, procedures, and controls for the program.
• Conduct risk assessments for HIPAA/HITECH, data security and related laws.
• Create corrective action plans and monitor their effectiveness.
• Establish annual compliance work plans and audits.
• Report metrics to senior leadership and board committees.
• Deliver compliance training for all employees and vendors.
• Maintain a confidential reporting channel and oversee investigations.
• Monitor program performance and drive continuous improvements.
• Stay updated on evolving healthcare regulations and industry standards.
• Liaise with senior management to embed compliance in operations.

Skills

Leadership

Healthcare compliance

Regulatory knowledge

Communication

Strategic thinking

Fast-paced environment

Education

Bachelor’s degree

Juris Doctorate (JD) or Master’s

CHC certification

Tools

Policy management systems

Risk assessment frameworks

Job description

At Commure, we're building the AI Operating System for healthcare, the foundation that defines how care is delivered, documented, and financed. Our platform spans the full care journey: Ambient AI and Dictation eliminating documentation burden at the point of care, intelligent Agents automating patient and revenue workflows, and autonomous RCM processing billions in claims, all on a single AI-native platform integrated with 60+ EHRs.

Healthcare carries a $1 trillion administrative burden and we're at the center of transforming it. Today, 500,000+ clinicians across 500+ healthcare organizations nationwide trust Commure to handle $25B+ in annual claims and support over 200 million patient interactions. Our latest $70M raise at a $7B valuation reflects the confidence the market has placed in this mission. We've also been named to the Fortune Future 50 list and the 2026 AI Breakthrough Awards for “Overall NLP Company of the Year.”

Our team works directly alongside clinicians, not through layers of process, which means the gap between what you build and its impact on patient care is immediate. We move fast, deploy daily, and take full ownership from early thinking to production. If you're energized by hard problems, high stakes, and a team that holds itself to a high bar, you'll find your people here.

The future of healthcare is being built right now. Come deliver this transformation.

About the Role

The Director of Compliance is responsible for designing, overseeing, and monitoring the effectiveness of Commure, Inc.’s corporate compliance program. This role is critical in promoting a culture of integrity and ensuring the company adheres to the complex web of laws, regulations, and standards governing the Health IT industry. This role will function as an independent and objective leader, reviewing and evaluating compliance issues throughout the organization. They will monitor systems and processes to ensure compliance with all applicable healthcare laws, data privacy regulations, and company policies, including the Code of Conduct.

The Director of Compliance will report directly to the Chief Legal Officer and dotted line to the Board of Directors (the Board), ensuring independence and authority. This role will serve as a key advisor to senior leadership and a resource for all employees, providing guidance on the company’s ethical values and facilitating compliant and integral business operations.

What You'll Do

The key accountabilities include, but are not limited to, the following:

• Knows, understands, and champions Commure’s mission, vision, and values through leadership behaviors, practices, and decisions.

• Chairs the Corporate Compliance Committee, ensuring regular meetings with appropriate cross-functional representation from Legal, Human Resources, Engineering, Product, Security, and Sales.

• Develops, implements, and maintains policies, procedures, and controls for the compliance program to prevent and detect illegal, unethical, or improper conduct, with a strong focus on Health IT-specific risks.

• Conducts regular, comprehensive risk assessments to identify potential areas of compliance vulnerability, including those related to HIPAA/HITECH, data security, the Anti-Kickback Statute, Stark Law, information blocking, and FDA regulations for Software as a Medical Device (SaMD).

• Develops, implements, and tracks corrective action plans to resolve compliance issues, providing guidance to prevent future occurrences.

• Establishes and executes an annual compliance work plan based on risk assessment results, including targeted auditing and monitoring activities.

• Develops and reports on key compliance metrics and data analytics to senior leadership and the Audit Committee of the Board, detecting potential fraud, waste, abuse, and other aberrant patterns.

• Directs and oversees the creation and delivery of effective compliance training and educational materials for all employees, executives, board members, and key vendors, focusing on the real-world application of compliance principles to Commure's business model.

• Manages and promotes effective lines of communication, including the company’s compliance hotline, ensuring a safe and anonymous channel for reporting concerns.

• Monitors the performance and effectiveness of the compliance program on an ongoing basis and implements continuous improvements.

• Maintains expert knowledge of the evolving healthcare regulatory landscape and advises the company on the potential impact of new laws and regulations.

• Liaises with senior management to ensure a strong "tone at the top," integrate compliance activities into business operations, and evaluate the compliance-related performance of employees.

What You Have

• Bachelor’s degree required; Juris Doctorate (JD) or relevant Master’s degree (e.g., MBA, MHA) is strongly preferred.

• Certification in Healthcare Compliance (CHC) or similar compliance certification is highly desirable.

• A minimum of 6-10 years of experience in a healthcare regulatory and compliance role, with experience in a leadership capacity, preferably within a Health IT, SaaS, or medical device company.

• Proven ability to develop and implement effective compliance policies, procedures, and training programs.

• Expert knowledge of the U.S. healthcare regulatory landscape, including deep expertise in HIPAA, HITECH, the Anti-Kickback Statute, and state/federal data privacy laws (e.g., CCPA/CPRA).

• Demonstrated experience with FDA regulations for digital health tools or Software as a Medical Device (SaMD) and ONC Cures Act Final Rule requirements (including information blocking and interoperability) is a significant plus.

• Exceptional leadership and management skills with the ability to motivate and influence others positively.

• Superior verbal and written communication skills, with the ability to articulate complex regulatory concepts to a variety of audiences.

• Strong interpersonal skills and the ability to build collaborative relationships across all levels of the organization.

• Excellent organizational and strategic planning skills.

• A deep commitment to fostering teamwork and continuous quality improvement.

• Analytical and strategic thinker with strong problem-solving capabilities.

• Ability to work effectively in a fast-paced, innovative tech environment.

Please be aware that all official communication from us will come exclusively from email addresses ending in @commure.com. Any emails from other domains are not affiliated with our organization.

Employees will act in accordance with the organization’s information security policies, to include but not limited to protecting assets from unauthorized access, disclosure, modification, destruction or interference nor execute particular security processes or activities. Employees will report to the information security office any confirmed or potential events or other risks to the organization. Employees will be required to attest to these requirements upon hire and on an annual basis.