Senior Compliance Manager

Required skills:

Jira

Nice to have skills: HIPAA Compliance Training

Region:
United States of America, Canada

On-Site

Location:

San Francisco, CA, USA

• Work Arrangement: Onsite, 5 days a week, on the San Francisco Peninsula (Bay Area).
• Location & Relocation: Open to candidates based in the US and Canada. A $10,000 relocation package and visa sponsorship are available.

This growth-stage technology company develops AI-driven voice automation platforms for large-scale enterprise customer service. The organization operates a lean, profitable model focused on high-impact solutions for US-based clients. By streamlining complex customer interactions through voice technology, the firm helps major enterprises manage high-volume communications. The team culture emphasizes direct ownership and close collaboration with leadership to solve scaling challenges in the conversational AI space.

As the first dedicated compliance hire, you will report directly to a founder and take full ownership of the organization’s security and regulatory framework. This role is critical to the company’s growth, as successful enterprise and healthcare partnerships depend on robust compliance protocols. You will be responsible for building and maintaining the trust infrastructure that enables the sales team to close large-scale deals.

This is a high-impact position offering the opportunity to define compliance strategy and execution for a rapidly scaling AI startup.

• Manage end-to-end SOC 2 Type II, HIPAA, and ISO 27001 certification programs and external auditor relationships.
• Lead the response process for security questionnaires and RFPs to accelerate the enterprise sales cycle.
• Develop and maintain internal policies, vendor risk management protocols, and staff security training programs.
• Monitor and interpret evolving global regulations specifically affecting AI and voice technology products.
• Partner with the sales team as a technical subject matter expert during enterprise security and compliance reviews.
• Maintain and update public-facing trust documentation and security posture information.

• 4+ years of experience in compliance, GRC, or security auditing.
• Proven experience personally leading and completing at least one SOC 2 Type II audit.
• Professional background within a venture-backed SaaS/AI company or relevant experience at a top-tier audit firm.

• Professional certifications such as CISA, CISM, or CRISC.
• Hands-on experience using compliance automation platforms like Vanta or Drata.
• Direct experience managing HIPAA compliance requirements for healthcare industry clients.
• Equity participation with a 4-year vesting schedule and 1-year cliff.
• Relocation support for onsite work in the San Francisco Bay Area.
• Visa sponsorship available (H-1B, TN, L-1, E-3, and F-1 OPT/CPT).