Head of IT Governance, Risk, and Compliance; GRC)

Lab Connect is seeking a senior leader to establish and mature our IT Governance, Risk, and Compliance function — and to lead the organization in using AI itself as the engine of that compliance. This is a build role for a leader who believes that in a GxP environment, controls should be authored, tested, and enforced continuously by intelligent systems rather than rediscovered during an audit.

You will own the strategy and operating model that advances compliance across SOC 2, HIPAA, GDPR, and FDA 21 CFR Part 11, while deploying AI and agentic tooling to draft and maintain SOPs, detect compliance gaps across our code and configuration, and enforce regulated-development standards at the point of work. In parallel, you will govern AI adoption responsibly across internal workflows and product development, setting the validation and oversight standards that make AI trustworthy in a healthcare context.

In this role, you will work closely with teams across infrastructure, security, engineering, data, quality, and operations to make compliance a continuous, largely automated property of how Lab Connect builds and operates — not a documentation exercise performed after the fact. You will define the target state for an AI-enabled GxP control environment and the roadmap to reach it: AI-assisted authoring and maintenance of SOPs and controlled documents, automated detection of compliance and validation gaps across code, configuration, and infrastructure, agentic development rules that encode regulated-engineering requirements directly into the tools engineers use every day, and continuous evidence collection that keeps the organization audit-ready by default.

At the same time, you will govern the AI systems themselves — establishing the validation, human-oversight, transparency, and monitoring standards required for AI to be used safely in clinical research and healthcare — working in partnership with the Quality team that owns CSV and GxP validation.

• AI-Enabled Compliance Operations:
  You will lead Lab Connect’s shift from periodic, manual compliance work to continuous, AI-assisted compliance. This includes deploying AI to draft, revise, and maintain SOPs, work instructions, and controlled documentation against current regulation and actual practice; keeping the SOP register, change history, and training impact current; and surfacing drift between what our procedures say and what our systems actually do.
• Automated Compliance Gap Detection:
  You will establish the capability to scan code, configuration, infrastructure-as-code, pipelines, and system documentation for compliance and validation gaps — Part 11 controls such as audit trails, electronic signature, access control, and record retention; privacy and PHI handling; and change-control evidence — surfacing findings continuously to engineering teams rather than at audit time.
• Agentic Development Rules and Policy-as-Code:
  You will define and enforce the guardrails that govern AI-assisted and agentic software development in a regulated environment: repository-level rule sets that encode regulated-engineering requirements into the coding agents themselves, mandatory human review and approval gates, traceability from requirement to code to test evidence, explicit boundaries on autonomous agent action in validated systems, and automated checks that block non-compliant changes before they merge.
• AI Governance and Healthcare AI Compliance:
  You will own the governance framework, review process, and risk controls for Lab Connect’s AI-first internal workflows and AI-enabled product capabilities. This includes acceptable-use standards, model and vendor oversight, data handling, human-in-the-loop requirements,…