Senior GRC Analyst: SOC 2, PHI & AI Governance Lead

Ambience Healthcare, Inc.; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

Ambience Healthcare, Inc. is seeking a Senior GRC Analyst to own our governance, risk, and compliance program end to end. You will drive SOC 2 readiness, PHI governance, vendor reviews, and AI-model risk.

The role blends policy writing with hands-on controls validation using AI tools to produce evidence-backed answers. You will partner with engineering, legal, and finance to ensure audit readiness and customer trust, shaping our security posture as we scale our SaaS platform in regulated

Qualifications

• Senior-level GRC or compliance experience in a SaaS environment.
• Ownership of SOC 2 end-to-end audits and evidence collection.
• Experience building PHI governance inventories and HIPAA mapping.
• Ability to establish and run vendor and AI-model risk reviews.
• Proven ability to author security and compliance policies for engineers, legal, and customers.

Responsibilities

• Own the governance, risk, and compliance program end to end, including SOC 2 and PHI governance.
• Stand up vendor and AI-model risk reviews with legal and finance.
• Drive risk to closure with engineering and create auditable processes.
• Serve as the front door for customer trust via RFPs and security questionnaires.

Skills

GRC governance

SOC 2 ownership

Vendor risk management

PHI governance

Security controls

Audit readiness

Policy writing

Cross-functional collaboration

Tools

Vanta

Drata

Claude Code

Job description

Ambience Healthcare, Inc. is seeking a Senior GRC Analyst to own our governance, risk, and compliance program end to end. You will drive SOC 2 readiness, PHI governance, vendor reviews, and AI-model risk.

The role blends policy writing with hands-on controls validation using AI tools to produce evidence-backed answers. You will partner with engineering, legal, and finance to ensure audit readiness and customer trust, shaping our security posture as we scale our SaaS platform in regulated