Senior GRC & AI Security Lead

Ambience Healthcare, Inc.; San Francisco (CA); Hybrid; USD 140,000 - 200,000; Full time

Benefits offered by this job

Remote-friendly culture

401(k) with company match up to 3%

Annual company off-sites

Equipment provisioning

Parental leave

Healthcare benefits

Job summary

Ambience Healthcare, Inc. is seeking a Senior GRC Analyst to own our governance, risk, and compliance program end to end. You will manage SOC 2, PHI governance, vendor risk, and AI-model risk with strong collaboration across legal, finance, and engineering.

You will use AI tooling to verify controls, write auditable policies, and drive risk remediation with engineering to uphold customer trust and regulatory compliance.

Qualifications

• Own a SOC 2 audit from evidence collection through auditor sign-off.
• Build PHI governance inventory and surface HIPAA gaps.
• Threat-model new vendors and data flows for risk exposure.
• Write auditable policies engineers can follow; support AI governance.

Responsibilities

• Own the compliance program end to end, including SOC 2 readiness.
• Govern PHI inventory and HIPAA governance; close gaps.
• Verify controls using AI coding assistants with clear evidence.
• Lead vendor and AI-model risk reviews with legal and finance.
• Remediate security risks with engineering and publish policies.
• Serve as front door for customer trust via RFPs and safety questionnaires.

Skills

SOC 2 ownership

SaaS compliance

Policy writing

AI governance

Threat modelling

Communication

Startup mindset

Tools

Vanta

Drata

Job description

Ambience Healthcare, Inc. is seeking a Senior GRC Analyst to own our governance, risk, and compliance program end to end. You will manage SOC 2, PHI governance, vendor risk, and AI-model risk with strong collaboration across legal, finance, and engineering.

You will use AI tooling to verify controls, write auditable policies, and drive risk remediation with engineering to uphold customer trust and regulatory compliance.