Senior Compliance & Audit Lead - AI Governance

Mpathic; Northern (KY); On-site; USD 140,000 - 180,000; Full time

Job summary

mpathic is seeking a Senior Manager, Compliance & Audit to own and scale the compliance programs supporting our technology and customers. This hands-on role spans regulatory requirements, technical controls, external audits, and internal teams to build a unified program across SOC 1, SOC 2, ISO 27001, ISO 42001, and Part 11.

You will translate requirements into practical controls, automate evidence where possible, and ensure systems can stand up to auditors, customers, and regulated partners.

Qualifications

• 7+ years in IT compliance, GRC, audit, or computerized systems validation.
• Hands-on experience applying Part 11 and GxP data integrity requirements to software/SaaS systems.
• Experience leading SOC 1, SOC 2, ISO/IEC 27001 audits or certifications.
• Familiarity with AI governance frameworks (NIST AI RMF, EU AI Act) is a plus.

Responsibilities

• Plan and run the annual audit and certification cycle across SOC 1/2, ISO/IEC 27001, ISO/IEC 42001 and Part 11 readiness.
• Own Part 11 compliance for systems handling regulated records and maintain risk-based validation.
• Maintain a unified control framework to avoid duplicating evidence across audits.
• Lead internal audits, track nonconformities and CAPAs through closure.
• Collaborate with engineering, delivery, operations, and HR to embed controls into product development.
• Represent the company with external auditors and certification bodies.
• Develop policies and training related to Part 11 and GxP.

Skills

IT compliance

Audit management

FDA 21 CFR Part 11

GxP data integrity

ISO/IEC 27001

SOC 1 SOC 2

Cloud configurations review

Tools

GRC platform

Job description

mpathic is seeking a Senior Manager, Compliance & Audit to own and scale the compliance programs supporting our technology and customers. This hands-on role spans regulatory requirements, technical controls, external audits, and internal teams to build a unified program across SOC 1, SOC 2, ISO 27001, ISO 42001, and Part 11.

You will translate requirements into practical controls, automate evidence where possible, and ensure systems can stand up to auditors, customers, and regulated partners.