Hippocratic AI
Governance, Risk, and Compliance (GRC) Lead
Menlo Park, CA · On-site · Full-time · Posted Oct 16, 2026
- Experience
- 5+ years in GRC, compliance, or audit, ideally in a healthcare or payor environment.
- Education
- Bachelor's degree
About the job
Leads Hippocratic AI’s governance, risk, and compliance program, including certifications, privacy and AI governance, audits, customer assurance, and enterprise risk management.
What you'll do
- Manage compliance frameworks, certifications, audits, and regulatory readiness, including international and federal requirements.
- Lead enterprise, vendor, privacy, and AI governance reviews and translate findings into controls and remediation.
- Own customer security assessments, trust-center evidence, reporting, presentations, and compliance training.
What they ask for
- Strong working knowledge of HIPAA, HITRUST, SOC 2, and ISO 42001.
- Working knowledge of GDPR, UK GDPR, cross-border transfers, and data residency, with experience translating requirements into operational controls.
- Hands-on experience with customer security assessments, TPRM portals, and GRC or trust-center tooling.
- Proven experience leading risk assessments, audits, vendor risk reviews, and compliance reviews.
Nice to have
- CISM, CRISC, CHPC, or similar certifications.
- Experience with FedRAMP High, GovCloud, NIST SP 800-53 / 800-171, pharma or life sciences, or privacy certifications.
Tools
Vanta, SOC 2, HITRUST, HIPAA, ISO 42001, GDPR, UK GDPR, FedRAMP High
AI focus
Implement and manage an ISO 42001 AI Management System, conduct governance reviews against emerging AI laws and regulations, and use AI-assisted drafting with rigorous human review for customer assessments and responses.
Model-written summary · the original posting is authoritative