Ambience Healthcare
Senior GRC Analyst
$174K–$228K
San Francisco · Hybrid · Senior · Full-time · Posted Sep 29, 2026
- Experience
- Senior-level experience; no number of years stated.
About the job
Own and operate Ambience Healthcare’s governance, risk, and compliance program, including audits, PHI governance, vendor and AI-model risk, and customer security evidence.
What you'll do
- Run the SOC 2 program, manage audit evidence and auditor relationships, and prepare for ongoing audit readiness.
- Maintain PHI inventories, identify and remediate HIPAA and security gaps, and lead vendor and AI-model risk reviews.
- Investigate controls using AI coding assistants, drive security risks to closure, write policies, and respond to customer security requests.
What they ask for
- Senior-level GRC or compliance experience in a SaaS environment.
- Ownership of a SOC 2 or equivalent audit from evidence collection through auditor sign-off.
- Ability to use an AI coding tool to investigate source code and threat-model vendors.
- Strong policy writing and communication skills with engineering, legal, and customers.
Nice to have
- ISO 27001 experience and exposure to ISO 42001 or other AI governance frameworks.
- Experience in healthcare, fintech, or another highly regulated industry.
Pay
$173,600 – $227,850 (base salary)
Tools
Vanta, Drata, Claude Code, SOC 2, ISO 42001, ISO 27001, HIPAA
AI focus
Use AI coding assistants to verify controls from source code; establish AI governance and risk reviews for AI model providers.
Model-written summary · the original posting is authoritative