Compliance and Security Director

Experience developing, implementing, and monitoring internal practices for SOC2, HIPAA, NIST, or ISO compliance standards.

Familiarity with hospital security operations and the ability to accurately and credibly represent Bluesight's security posture and the maturity of our operations to customers.

Working knowledge of cloud infrastructure and security (AWS preferred): IAM, networks, encryption and key management, logging/monitoring, and the shared responsibility model. You can read an architecture diagram and challenge a control claim.

Working knowledge of AI governance ( NIST AI RMF or vendor AI risk) and a proactive interest in AI regulation. 

Clear communication of complex and critical information to a broad audience.

Subject matter expertise in security best practices.  and the ability to recommend risk treatment and escalate items for acceptance.

A drive to learn unfamiliar domains and a willingness to work across departments as the product and data requirements evolve 

Autonomy and proactivity around driving work to completion in the face of ambiguity and across multiple stakeholders.

Strong familiarity with data, data protection and privacy, and with compliance automation or GRC platforms (Vanta, Drata etc.)

Opportunities to solve problems of scale across a tech-forward, fast-growing company

Strong voice in what we work on, how it works, and how it is built

Room to be creative and choose your own path

Trust in your sense of ownership

Coworkers who you'll learn from, who will push you and who are looking to learn from you