Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Target Resume Now
Tailor your resume to this GRC Analyst role.
Rezi rewrites your resume against Ambience Healthcare's job description. Free.
Tailor your resume to this GRC Analyst role.
Rezi rewrites your resume against Ambience Healthcare's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the GRC Analyst posting at Ambience Healthcare — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the GRC Analyst posting at Ambience Healthcare — free, in seconds.
About the Role
We are looking for a Senior GRC Analyst to own our governance, risk, and compliance program end to end, from SOC 2 and PHI governance to vendor and AI-model risk to the security evidence our customers rely on. This is a senior individual contributor role with a broad mandate and real latitude to shape how the program runs. We treat GRC as an agile, evolving practice rather than a checkbox exercise.
Responsibilities
- Run SOC 2 end to end, including the auditor relationship, evidence collection and interpretation in Vanta, and continuous audit readiness.
- Help lay the groundwork for AI governance frameworks like ISO 42001.
- Build and maintain an authoritative inventory of where PHI lives and which systems and models touch it.
- Surface and close HIPAA and governance gaps.
- Use AI coding assistants analytically to verify whether a control is actually implemented, producing clear, evidenced answers.
- Build and run the security review process for new vendors and AI model providers, partnering with legal and finance.
- Partner with engineering to enumerate, prioritize, and remediate security risks on a predictable, auditable cadence.
- Author the security and compliance policies that engineering, legal, and GTM teams can actually follow.
- Serve as first point of contact for RFPs and security questionnaires.
- Maintain a trust portal with current, customer-facing evidence.
Requirements
- Senior-level GRC or compliance experience in a SaaS environment.
- Experience owning a SOC 2 (or equivalent) audit from evidence collection through auditor sign-off, ideally using a GRC automation platform like Vanta or Drata.
- Comfortable using an AI coding tool like Claude Code to answer compliance questions directly from source code.
- Able to threat-model a new vendor: what data it touches, where that data flows, and what controls it needs.
- Write policies and standards that hold up to audit and that engineers can actually use.
- Work directly and confidently with engineering, legal, and customers.
- Thrive in ambiguity, take a partially built function and make it accountable without waiting for structure to be handed to you.
- Happily work outside a narrow swim lane.
Skills
- SOC 2
- PHI governance
- HIPAA
- AI coding tools
- Vendor risk reviews
- AI-model risk reviews
- Security policies
- Compliance policies
- RFP response
- Security questionnaires
- Trust portal management
- ISO 27001
- ISO 42001
Location
- Remote
- San Francisco HQ
Work Type
- Full-time
Experience Level
- Senior
Benefits
- Comprehensive medical, dental, and vision coverage for you and your dependents
- 401(k) with a company match of up to 3% of base salary
- Parental leave
- Annual company-wide off-sites, team off-sites and regular team lunches and all-hands gatherings, with travel, lodging and meals covered
- Flexible time off with no annual cap
- Company-wide holidays
- Annual holiday shutdown from December 24–January 1
About the Company
- Ambience is building the AI intelligence platform that restores humanity to healthcare and drives meaningful ROI for health systems across the country.
- Our technology helps providers focus on delivering great care by removing the administrative burden that pulls them away from patients and away from their most impactful work.
- Ambience delivers real-time coding-aware documentation and clinical workflow support across ambulatory, emergency and inpatient settings at the top health systems in North America.
- Our teams operate relentlessly with extreme ownership to build the best solutions for our health system partners.
- We value candor, positivity and deep thought — and we expect a lot from each other because we know the problems we’re solving truly matter.
- Ambience was ranked #1 for Improving the Clinician Experience in the KLAS Research Emerging Solutions Top 20 Report, recognized by Fast Company as one of the Next Big Things in Tech, named one of the best AI companies in healthcare by Inc., and selected as a LinkedIn Top Startup in 2024 and 2025.
- We’re backed by Oak HC/FT, Andreessen Horowitz (a16z), OpenAI Startup Fund, and Kleiner Perkins — and we’re just getting started.
Equal Opportunity
- Ambience Healthcare is an equal opportunity employer and is committed to building a diverse and inclusive workplace.
- We do not discriminate on the basis of race, color, religion, sex, gender identity or expression, sexual orientation, national origin, age, disability, veteran status, genetic information, or any other legally protected status.
- We encourage applicants from all backgrounds to apply.
- Ambience is committed to supporting every candidate’s ability to fully participate in our hiring process. If you need any accommodations during your application or interviews, please reach out to our Recruiting team at accommodations@ambiencehealthcare.com. We’ll handle your request confidentially and work with you to ensure an accessible and equitable experience for all candidates.