Risk & Compliance Lead

Vaga não está no LinkedIn

🕒 Setembro 3

🎸 Tennessee – Remoto

🎸 Tennessee – Remote

💵 $125.000 - $135.000 / ano

⏰ Tempo Integral

🟠 Sênior

🚔 Conformidade

👻 Score fantasma 4%

O que significa: quão provável esta vaga está aberta sem contratação ativa.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Configurar Alerta de Email para Novas Vagas

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo

Hi Rasmus

SiteLinkedInTodas as Vagas

11 - 50 funcionários

🏥 Saúde

⚕️ Seguro de Saúde

📚 Educação

💰 Seed Round em 2020-06

Healthcare • Healthcare Insurance • Education

O Hi Rasmus é uma plataforma amigável projetada para melhorar a prestação de serviços de terapia comportamental, com foco específico em crianças com autismo. A plataforma capacita analistas comportamentais, professores e supervisores clínicos com ferramentas intuitivas de coleta de dados e capacidades de supervisão de sessões para melhorar a qualidade do atendimento e os resultados para as crianças. O Hi Rasmus se concentra em maximizar a eficiência dos clínicos e garantir altos padrões de terapia por meio de melhorias orientadas por feedback e parcerias com especialistas.

Descrição

• Own and continuously improve Hi Rasmus' risk and compliance program, including privacy and security compliance practices. • Lead risk assessments, policy reviews, audit readiness, evidence management, and continuous improvement initiatives. • Shape the long-term risk and compliance roadmap as the business grows. • Build scalable programs for evolving requirements and priorities. • Develop and lead processes for customer security reviews, HECVATs, questionnaires, and due diligence requests. • Develop and maintain the customer-facing Security Center and trust resources. • Partner with Sales and Customer Success during customer evaluations and procurement processes. • Manage Data Processing Agreements, Business Associate Agreements, security exhibits, and related terms. • Ensure contractual terms and compliance requirements are applied consistently across customer relationships. • Partner with internal stakeholders and external legal counsel when specialized legal guidance is needed. • Maintain policies, standards, documentation, controls, and compliance evidence. • Coordinate audits, assessments, certifications, and remediation activities. • Develop and lead security awareness and compliance training. • Create practical risk-management guidance for teams. • Partner with external auditors, consultants, and compliance vendors. • Use data, evidence, and prioritization to focus resources on material risks. • Collaborate with Engineering, Product, Sales, Customer Success, Finance, and Leadership. • Provide leadership with fact-based visibility into risks, priorities, and progress. • Integrate risk and compliance into company operations without unnecessary bureaucracy.

🎯 Requisitos

• 5+ years of experience leading or supporting risk, compliance, privacy, security, or related programs within SaaS, healthcare technology, or another regulated industry. • Experience building or improving risk and compliance programs—not just maintaining them. • Experience supporting customer security reviews, vendor assessments, due diligence, enterprise procurement processes, and/or compliance-related customer agreements. • Working knowledge of HIPAA and experience applying privacy and security requirements in a practical business environment. • Experience preparing for or supporting security audits, certifications, or compliance assessments. • Strong written communication skills and the ability to translate complex requirements into clear, practical guidance. • Strong business judgment and the ability to work effectively across technical and non-technical teams. • Familiarity with GDPR, CCPA, or other privacy frameworks. • Experience with SOC 2, ISO 27001, HITRUST, NIST, or similar standards. • Experience working in healthcare, behavioral health, education, or another highly regulated industry. • Familiarity with HECVATs, VPATs, accessibility requirements, or enterprise procurement processes. • Experience working in a growing SaaS company where processes and priorities evolve quickly. • Flexible working hours within US time zones, with some morning overlap with European hours; Eastern Time works seamlessly, and Pacific or other time zones work well for those able to start earlier.

🏖️ Benefícios

• 100% covered health, dental, and vision premium for employee-only standard plan (Family can join too, with a variable cost) • Employer Sponsored Short-Term Disability Coverage • Employer Sponsored Life Insurance • Optional group benefits: AD&D, long-term disability • Participation in a 401k plan through Empower • Professional development opportunities • Room for growth within the company • Paid Time Off: 10 vacation days, 5 sick days, 7 paid holidays + 3 floating holidays for ultimate flexibility • All Parents/Caregivers: 6 weeks fully paid parental leave • Birthing Parents: Up to 14 weeks paid parental leave • Fully remote and flexible work environment—work from wherever feels right! • Opportunity to make a meaningful impact in the Autism healthcare space • Flat structure, open doors • Balance is a priority • Real impact, real growth