Compliance and Security Director

Bluesight

. Own Bluesight’s compliance posture, risk program, and customer-facing regulatory assurance .

Posted 11/3/2026full-timeRemote • United StatesLead💰 $155,000 - $170,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing compliance programs such as SOC 2 and HIPAA, with a strong focus on risk assessment, cloud security, and regulatory assurance in healthcare. Capable of effectively communicating complex security concepts and strategies to diverse audiences while driving compliance initiatives across multiple stakeholders.

Highest-signal resume keywords

SOC 2 Compliance ManagementHIPAA Compliance ExpertiseAWS Cloud Security KnowledgeRisk Assessment and ManagementCompliance Automation Platforms

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

SOC 2 ComplianceHIPAA ComplianceNIST ComplianceISO ComplianceCloud SecurityRisk AssessmentData ProtectionSecurity Best PracticesCompliance Controls DocumentationAI Governance

Soft Skills

Clear CommunicationAutonomyProactivityCollaborationTraining and Advising

Tools & Technologies

AWSIAMVantaDrataCompliance Automation Platforms

Industry Keywords

Healthcare Data SecuritySecurity OperationsVendor Risk ManagementBusiness ContinuityDisaster Recovery

Tech Stack

Tools & technologies

AWSCloud

About the role

Key responsibilities & impact

Own Bluesight’s compliance posture, risk program, and customer-facing regulatory assurance
Lead the SOC 2 compliance program and manage the annual audit and certification process
Own the risk register, annual risk assessment, third-party/vendor risk, business continuity/disaster recovery, and policy lifecycles
Engage with current and potential hospital customers on complex security and IT questions and concerns
Own the customer security review process, including completing security and IT questionnaires and responding to technical and contract-related compliance issues
Assess and document compliance controls across AWS cloud infrastructure
Work with Engineering to validate configurations, access controls, logging, encryption, and shared-responsibility boundaries for SOC 2 and HIPAA evidence
Partner with IT on endpoint protection, IAM, and access reviews, and own audit evidence
Set up and extend the compliance automation platform
Conduct internal audits, train employees, and advise on security and compliance
Shape and communicate compliance strategy concerning healthcare data security and AI
Document work and decision-making processes and lead presentations and discussions for broad audiences
Partner with the CTO/Security Officer and Security Engineering team; report to the General Counsel

Requirements

What you’ll need

Experience developing, implementing, and monitoring internal practices for SOC2, HIPAA, NIST, or ISO compliance standards
Familiarity with hospital security operations and ability to represent Bluesight's security posture and operational maturity to customers
Working knowledge of cloud infrastructure and security, preferably AWS, including IAM, networks, encryption and key management, logging/monitoring, and the shared responsibility model
Ability to read an architecture diagram and challenge a control claim
Working knowledge of AI governance, including NIST AI RMF or vendor AI risk, and interest in AI regulation
Ability to clearly communicate complex and critical information to a broad audience
Subject matter expertise in security best practices and ability to recommend risk treatment and escalate items for acceptance
Willingness to learn unfamiliar domains and work across departments
Autonomy and proactivity in driving work to completion across multiple stakeholders
Strong familiarity with data, data protection and privacy, and compliance automation or GRC platforms such as Vanta and Drata

Benefits

Comp & perks

Competitive salary
Unlimited vacation days
Generous insurance coverage
401(k) program with a company match
Fun, collaborative culture
Opportunities to solve problems of scale across a tech-forward, fast-growing company
Strong voice in what we work on, how it works, and how it is built
Room to be creative and choose your own path
Trust in your sense of ownership
Coworkers who you'll learn from, who will push you and who are looking to learn from you
Annual discretionary bonus eligibility
Health and wellness benefits
Leave benefits
Retirement benefits