Senior GRC Analyst — AI/PHI Security & SOC 2 Lead

Showcify, Inc.; United States; Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Comprehensive medical, dental, vision

401(k) with company match

Remote-friendly culture with SF HQ and

Equipment provisioning to work from SF

Parental leave

Annual company-wide off-sites

Flexible time off

Job summary

Ambience Healthcare is seeking a Senior GRC Analyst to own governance, risk, and compliance from SOC 2 to PHI governance in a SaaS environment. You will verify controls using AI tools, manage vendor risk, and collaborate with legal, engineering, and finance to ensure trust with customers.

This senior IC role offers ownership of an evolving GRC program, with a focus on reducing risk and enabling scalable AI governance across Ambience's healthcare platform.

Qualifications

• Hands-on SOC 2 ownership in a SaaS environment from evidence collection through auditor sign-off.
• Experience with GRC automation platforms like Vanta or Drata.
• Strong technical curiosity using AI coding tools to answer questions from source code.
• Clear writing of policies and standards that engineers can follow.
• Startup ownership mindset, able to act with ambiguity and accountability.
• ISO 27001 experience and exposure to ISO 42001 or similar AI governance frameworks.
• Regulated-industry background in healthcare or fintech.

Responsibilities

• Own the compliance program end-to-end, including SOC 2 evidence and auditor relationships.
• Lead PHI governance and surface HIPAA and governance gaps.
• Investigate controls firsthand using AI tools to verify implementation.
• Stand up vendor and AI-model risk reviews with cross-functional partners.
• Drive risk to closure with engineering and document security policies.
• Be the front door for customer trust, handling RFPs and security questionnaires.

Skills

SOC 2 ownership

Technical curiosity

Policy writing

Clear communication

Startup ownership mindset

ISO 27001 experience

Healthcare/regulatory background

Tools

Vanta

Drata

Job description

Ambience Healthcare is seeking a Senior GRC Analyst to own governance, risk, and compliance from SOC 2 to PHI governance in a SaaS environment. You will verify controls using AI tools, manage vendor risk, and collaborate with legal, engineering, and finance to ensure trust with customers.

This senior IC role offers ownership of an evolving GRC program, with a focus on reducing risk and enabling scalable AI governance across Ambience's healthcare platform.