Remote Compliance Analyst: SOC 2 & AI Governance

Allia Health Group; United States; À distance; USD 90 000 - 118 000; Plein temps

Avantages offerts par ce poste

Medical

Vision

Dental

401(k) with company match

PTO

Flex days

Holidays

Résumé du poste

Allia Health Group is seeking a Compliance Analyst to support SOC 2 and ISO 42001 readiness across the company's cloud environments and AI governance initiatives.

You will coordinate evidence collection with IT, Security, Legal, and HR, maintain audit trails, and help build out the AIMS program to manage AI risk.

This remote, US-based role reports to the Chief Compliance Officer and offers a comprehensive benefits package.

Qualifications

• 2–5 years in compliance, GRC, information security, IT audit, or risk management.
• Working knowledge of SOC 2 and information security controls.
• Experience with a GRC/continuous compliance platform (Drata, Vanta, Secureframe, or similar).
• Experience coordinating evidence collection and remediation across technical and business teams.
• Familiarity with NIST, ISO 27001, or CIS Controls.
• Strong organizational skills and comfort managing multiple stakeholders and deadlines.
• Strong written and verbal communication.
• Able to work independently, spot gaps, and drive issues to resolution.

Responsabilités

• Coordinate evidence collection, validation, and remediation across control owners; follow up on overdue or incomplete items.
• Maintain audit readiness year‑round rather than treating SOC 2 as an annual exercise.
• Identify control gaps, exceptions, and deficiencies, and coordinate remediation with the responsible team.
• Support SOC 2 Type 2 audit fieldwork and auditor requests.
• Escalate overdue or material issues to the CCO and relevant IT/business leadership.
• Drata administration; operate and maintain Drata day to day, including API integrations and automated evidence sources.
• Investigate and remediate failed automated tests and compliance exceptions.
• Keep evidence complete, accurate, and correctly mapped to controls.
• Look for ways to automate manual evidence collection and cut recurring effort.
• ISO 42001 & AI governance: support building the AIMS, policies, procedures, controls, risk assessments.
• Help build and maintain an inventory of AI systems, apps, and use cases; coordinate AI risk assessments.
• Coordinate AI governance requirements with IT and business stakeholders.
• Maintain SaaS/technology inventory; support vendor reviews, SOC reports, certifications.
• Track vendor compliance gaps and remediation for SOC 2 and ISO 42001.
• Maintain the risk register and coordinate periodic updates with risk owners.
• Facilitate quarterly access reviews and track completion and remediation.
• Escalate material or overdue risks to the CCO and leadership.

Connaissances

SOC 2 knowledge

Info security controls

Stakeholder management

Communication

Independent work

Outils

Drata

Vanta

Secureframe

Description du poste

Allia Health Group is seeking a Compliance Analyst to support SOC 2 and ISO 42001 readiness across the company's cloud environments and AI governance initiatives.

You will coordinate evidence collection with IT, Security, Legal, and HR, maintain audit trails, and help build out the AIMS program to manage AI risk.

This remote, US-based role reports to the Chief Compliance Officer and offers a comprehensive benefits package.