Senior GRC Analyst: SOC 2, PHI & AI Risk (Remote)

ambiencehealthcare; San Francisco (CA); Hybrid; USD 180,000 - 240,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

401(k) with company match

Remote-friendly culture

Parental leave

Company off-sites

Flexible time off

Job summary

Ambience is seeking a Senior GRC Analyst to own the governance, risk, and compliance program across SOC 2, PHI governance, vendor risk, and AI-model risk. You will work as a senior individual contributor, applying agile practices and innovative tooling to demonstrate control effectiveness from code and data.

The role emphasizes collaboration with legal, finance, and engineering in a fast-paced startup environment.

Qualifications

• Hands-on SOC 2 ownership in a SaaS environment.
• Able to threat‑model vendors and data flows.

Responsibilities

• Own the compliance program end to end, including auditor relationships and evidence collection.
• Lead PHI governance and inventory maintenance.
• Verify controls using AI coding assistants and surface evidence.

Skills

SOC 2 ownership

AI governance

Threat modeling

Policy writing

Engineering collaboration

Tools

Vanta

Drata

Job description

Ambience is seeking a Senior GRC Analyst to own the governance, risk, and compliance program across SOC 2, PHI governance, vendor risk, and AI-model risk. You will work as a senior individual contributor, applying agile practices and innovative tooling to demonstrate control effectiveness from code and data.

The role emphasizes collaboration with legal, finance, and engineering in a fast-paced startup environment.