SaaS Compliance & Security Analyst — HIPAA, SOC 2, GDPR

Hubnest Inc.; California; On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Health coverage

Flexible work

Learning budget

PTO & holidays

Job summary

Hubnest Inc. is seeking a Compliance Analyst to ensure our platforms meet HIPAA, SOC 2, and GDPR requirements for civic, healthcare, and enterprise clients.

You will build and enforce policies that maintain trust and data integrity across our products. You will collaborate with engineering and product teams to translate regulatory requirements into actionable software requirements and manage the vendor risk program.

Qualifications

• 4+ years of professional experience in IT compliance, tech risk management, or information security auditing.
• 2+ years managing compliance programs for SaaS or cloud-native companies.
• Deep knowledge of SOC 2 criteria, HIPAA/privacy and security rules, and GDPR/CCPA frameworks.
• Experience leading SOC 2 Type II or ISO 27001 certification audits.
• Exceptional technical writing skills for policies and audit responses.
• Strong analytical ability to interpret legal/regulatory texts for technical architectures.
• Experience with GRC platforms like Vanta/Drata/Secureframe.
• Ability to collaborate with engineering teams.

Responsibilities

• Monitor and document platforms for HIPAA, SOC 2, and GDPR compliance.
• Conduct internal audits and risk assessments across products.
• Translate regulatory requirements into actionable software requirements with teams.
• Manage vendor risk evaluating third-party tools.
• Draft and update internal security policies and SOPs.
• Lead external audits including SOC 2 Type II.
• Develop compliance, privacy, and security training for employees.
• Investigate and report internal compliance violations or data breaches.
• Review contracts and BAA to ensure obligations are met.
• Implement automated compliance monitoring tools and dashboards.
• Stay current on evolving data privacy laws affecting verticals.
• Serve as internal point of contact for data handling inquiries.

Skills

IT compliance

Tech risk

InfoSec auditing

SOC 2

HIPAA

GDPR/CCPA

Technical writing

Regulatory analysis

Vendor risk

Education

Bachelor/BSc in Information Systems or related

Tools

Vanta

Drata

Secureframe

Job description

Hubnest Inc. is seeking a Compliance Analyst to ensure our platforms meet HIPAA, SOC 2, and GDPR requirements for civic, healthcare, and enterprise clients.

You will build and enforce policies that maintain trust and data integrity across our products. You will collaborate with engineering and product teams to translate regulatory requirements into actionable software requirements and manage the vendor risk program.