Senior Manager, Compliance & Audit

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $140k - $180k / year

⏰ Full Time

🟠 Senior

🚔 Compliance

👻 Ghost score 13%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

mpathic

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2021

🏥 Healthcare

💼 Consulting

🍽️ Food & Beverage

Healthcare • Consulting • Food & Beverage

mpathic is an AI-driven safety and analytics company that offers SaaS products and APIs to record, transcribe, analyze, and improve human–AI and human–human interactions in clinical, life‑science, and enterprise settings. Their offerings include speech-to-text transcription, PII redaction, behavior and checklist analytics, human-curated benchmarking datasets, red‑teaming expertise, and an Observing Agent API to add domain-informed guardrails for healthcare and medical agents. mpathic targets life sciences, clinical research organizations, healthcare providers, insurers, and HR/enterprise teams focused on empathy, safety, bias reduction, and compliance.

📋 Description

• Own and scale mpathic’s compliance and audit programs • Plan and run the annual audit and certification cycle for SOC 1, SOC 2, ISO/IEC 27001, ISO/IEC 42001, and Part 11 readiness • Select auditors, define scope, collect evidence, manage fieldwork and management responses, and deliver final reports or certificates • Own Part 11 compliance for systems creating, modifying, or storing regulated records • Maintain system inventories and GxP impact assessments • Lead risk-based validation and keep validation documentation current through releases and system changes • Maintain a unified control set mapped across applicable frameworks • Run risk-based internal audits, ISO-required internal audits, and management reviews; track nonconformities and CAPAs through closure • Partner with engineering and delivery teams on change management, code review, access reviews, release validation, and data handling • Automate evidence collection where possible and monitor control health • Maintain mpathic’s ISO/IEC 42001 AI management system, including AI risk and impact assessments and model lifecycle control documentation • Own security questionnaires, customer and sponsor quality audits, compliance-related RFP and contract responses, and the trust center • Own the GRC platform and integrations, including control mappings, automated evidence collection, and policy workflows • Maintain certification and regulatory policies and SOPs • Deliver compliance training, including Part 11 and GxP training • Monitor FDA guidance, AI governance requirements, and applicable data privacy laws and translate changes into recommendations

🎯 Requirements

• 7+ years in IT compliance, GRC, audit, or computerized systems validation, including direct ownership of external audits from scoping through final report or certification • Hands-on experience applying FDA 21 CFR Part 11 and GxP data integrity requirements to software or SaaS systems, including audit trails, electronic signatures, access controls, record retention, and ALCOA+ principles • Familiarity with FDA Computer Software Assurance (CSA) guidance, GAMP 5, and EU Annex 11 is a strong plus • Experience writing or leading validation plans, requirements traceability, risk-based test evidence (IQ/OQ/PQ or CSA-style), and validation summary reports • Experience supporting customer or sponsor audits of validated systems • Experience leading or supporting SOC 1 and SOC 2 Type II examinations and ISO/IEC 27001 certification or surveillance audits • Experience with ISO/IEC 42001 or other AI governance frameworks, including NIST AI RMF or the EU AI Act, is a strong plus • Comfortable reviewing cloud configurations across AWS, GCP, or Azure; IAM policies; CI/CD and change management records; logging; and infrastructure as code • Able to plan and execute internal audits, sample and evaluate evidence, write clear findings, and drive CAPAs through closure • Comfortable representing mpathic with external auditors, certification bodies, customers, and sponsor quality teams • Able to write policies, findings, and customer responses • Certifications such as CISA, ISO/IEC 27001 Lead Auditor or Lead Implementer, ISO/IEC 42001 Lead Auditor, ASQ CQA, or CISSP are a plus