Global Risk Compliance

Join Hippocratic AI, a leading company in the healthcare AI space. As the GRC Program Lead, you will be responsible for owning and scaling our governance, risk, and compliance program. You will work across various teams to ensure our compliance posture meets the demands of health systems, payors, pharma and life-science partners, federal customers, and new international markets. Your role will involve maintaining certifications, leading international data compliance efforts, managing policy updates, and driving enterprise risk management initiatives.

Privacy certifications (CIPP/E, CIPP/US, CIPM), experience with ISO 27001 / 27701, and familiarity with emerging AI governance regulations such as the EU AI Act

Responsibilities

• Assumer la responsabilité de la gestion et de l'expansion du programme de gouvernance, de risque et de conformité (GRC) de l'entreprise, en veillant à ce qu'il soit conforme aux exigences réglementaires et aux normes de l'industrie.
• Coordonner et superviser les efforts de conformité pour les certifications et attestations, y compris SOC 2, HITRUST, HIPAA, ISO 42001, et diriger les initiatives de gouvernance en matière d'IA.
• Collaborer avec les équipes internes pour maintenir la posture de conformité de l'entreprise et répondre aux demandes des clients, des partenaires et des régulateurs.
• Confident presenter able to explain complex security and compliance topics clearly to customers, executives, and non-technical audiences

Requirements

AI skillset and examples of use

• Working knowledge of international data protection and privacy law (GDPR and UK GDPR, cross-border transfers, data residency) and experience translating it into operational controls
• Startup experience; comfortable operating with ambiguity and minimal supervision
• 5+ years in GRC, compliance, or audit, ideally in a healthcare or payor environment
• Proven experience leading risk assessments, audits, vendor risk reviews, and compliance reviews, with strong analytical, problem-solving, and communication skills
• Hands-on experience with customer security assessments, TPRM portals, and GRC or trust-center tooling (e.g., Vanta)
• Strong working knowledge of healthcare regulations and frameworks, including HIPAA, HITRUST, SOC 2, and ISO 42001
• Bachelor's degree; CISM, CRISC, CHPC, or similar certifications preferred
• Detail-oriented, organized, and adaptable, with high integrity, discretion, and ethical standards; collaborates effectively across clinical, administrative, and technical teams
• Experience with FedRAMP High, GovCloud, and NIST SP 800-53 / 800-171, including authorization or readiness efforts for federal customers
• Experience in a pharma or life-science environment, including quality and validation frameworks such as GxP, GAMP 5, CSV, 21 CFR Part 11, and ALCOA+, and exposure to SaMD or ISO 13485