Senior GRC Analyst: SOC 2, AI & PHI Risk | Remote

Ambience; San Francisco (CA); Hybrid; USD 140,000 - 200,000; Full time

Benefits offered by this job

Remote-friendly culture

San Francisco HQ

Equipment provisioning

Parental leave

Company off-sites

Job summary

Ambience is seeking a Senior GRC Analyst to own governance, risk, and compliance across SOC 2, PHI governance, vendor risk, and AI-model risk. You will drive security evidence and customer trust in a fast-paced SaaS environment.

You'll work hands-on to verify controls using AI coding assistants, partner with legal, finance and engineering, and shape scalable policies that support audit readiness and ongoing risk reduction across Ambience's healthcare-focused platform.

Qualifications

• Senior-level GRC or compliance experience in a SaaS environment.
• Experience owning a SOC 2 audit from evidence collection to sign-off.
• Ability to write clear policies and collaborate with engineering, legal and customers.

Responsibilities

• Own the compliance program end to end, including SOC 2 and PHI governance.
• Lead vendor and AI-model risk reviews with legal and finance.
• Perform threat modeling for new vendors and verify controls using AI tools.
• Develop and maintain security policies and customer-facing evidence.

Skills

SOC 2 ownership

AI coding familiarity

Policy writing

Startup mindset

Tools

Vanta

Drata

Claude Code

Job description

Ambience is seeking a Senior GRC Analyst to own governance, risk, and compliance across SOC 2, PHI governance, vendor risk, and AI-model risk. You will drive security evidence and customer trust in a fast-paced SaaS environment.

You'll work hands-on to verify controls using AI coding assistants, partner with legal, finance and engineering, and shape scalable policies that support audit readiness and ongoing risk reduction across Ambience's healthcare-focused platform.