Security & Compliance Lead — HIPAA, SOC2, Equity & PTO

Clinically AI; San Diego (CA); On-site; USD 110,000 - 165,000; Full time

Benefits offered by this job

Healthcare coverage

Unlimited PTO

401(k) with company match

Equity

Job summary

Clinically AI is seeking a Security and Compliance Manager to own the day-to-day compliance program, keep frameworks audit-ready, and secure workforce systems. You will partner with engineering, product, and leadership to scale while maintaining rigorous remediation and risk controls.

This role emphasizes hands-on remediation, policy updates, and collaboration across teams in a fast-growing healthcare AI startup.

Qualifications

• 3+ years in security compliance, GRC, or IT security administration.
• Hands-on experience with a compliance automation platform (e.g., Vanta, Drata, Secureframe).
• Direct experience with SOC2 Type II and/or HIPAA programs.
• Experience administering Google Workspace for business.
• Experience managing an MDM solution for endpoints.
• Ability to write and operationalize security policies.

Responsibilities

• Own the compliance platform of record and manage frameworks, controls, tests, and policies.
• Triage failures, drive remediation to closure, and coordinate with owners.
• Maintain security policies and system docs with regular reviews.
• Coordinate external audits end-to-end and handle evidence requests.
• Administer Google Workspace: lifecycle, security settings, access, and audits.
• Operate MDM to keep endpoints enrolled, encrypted, and compliant.
• Track risk and lead mitigation with stakeholders.

Skills

Security compliance

GRC

IT security administration

OAuth 2.0/SAML

Policy writing

Tools

Vanta

Drata

Secureframe

Google Workspace

MDM tooling (Kandji/Jamf/Mosyle)

Job description

Clinically AI is seeking a Security and Compliance Manager to own the day-to-day compliance program, keep frameworks audit-ready, and secure workforce systems. You will partner with engineering, product, and leadership to scale while maintaining rigorous remediation and risk controls.

This role emphasizes hands-on remediation, policy updates, and collaboration across teams in a fast-growing healthcare AI startup.