SOC 2 Compliance & AI Governance Analyst

Southend Pharmacy; United States; On-site; USD 70,000 - 110,000; Full time

Benefits offered by this job

Medical benefits

Vision and dental coverage

401(k) with company match

PTO and Flex days

Job summary

Allia Health Group is seeking a Compliance Analyst to support SOC 2 operations and help build out ISO 42001 AI governance. You will work with IT, Security, HR and Legal to keep evidence current, manage remediation, and drive audit readiness year-round.

You will also assist in maintaining the AI management system inventory, risk assessments, and vendor security reviews, reporting to the Chief Compliance Officer and coordinating with risk owners.

Qualifications

• 2–5 years in compliance, GRC, information security, IT audit, or risk management.
• Working knowledge of SOC 2 and information security controls.
• Experience with a GRC/continuous compliance platform (Drata, Vanta, Secureframe).
• Experience coordinating evidence collection across technical and business teams.
• Familiarity with NIST, ISO 27001, or CIS Controls.
• Strong organizational skills and communication.
• Able to work independently and drive issues to resolution.

Responsibilities

• Coordinate evidence collection, validation, and remediation across control owners; follow up on overdue or incomplete items.
• Maintain audit readiness year-round rather than treating SOC 2 as an annual exercise.
• Identify control gaps, exceptions, and deficiencies, and coordinate remediation with the responsible team.
• Support SOC 2 Type 2 audit fieldwork and auditor requests.
• Escalate overdue or material issues to the CCO and relevant IT/business leadership.
• Operate and maintain Drata day to day, including API integrations and automated evidence sources.
• Investigate and remediate failed automated tests and compliance exceptions.
• Keep evidence complete, accurate, and correctly mapped to controls.
• Look for ways to automate manual evidence collection and cut recurring effort.
• Build monthly compliance and IT dashboards for leadership and surface deadlines.

Skills

Compliance experience

Information security

GRC

Auditing

Documentation

Tools

Drata

Vanta

Secureframe

Job description

Allia Health Group is seeking a Compliance Analyst to support SOC 2 operations and help build out ISO 42001 AI governance. You will work with IT, Security, HR and Legal to keep evidence current, manage remediation, and drive audit readiness year-round.

You will also assist in maintaining the AI management system inventory, risk assessments, and vendor security reviews, reporting to the Chief Compliance Officer and coordinating with risk owners.