Compliance and Security Director

Qualifications necessary for success in this role

• Experience developing, implementing, and monitoring internal practices for SOC2, HIPAA, NIST, or ISO compliance standards.
• Familiarity with hospital security operations and the ability to accurately and credibly represent Bluesight's security posture and the maturity of our operations to customers.
• Working knowledge of cloud infrastructure and security (AWS preferred): IAM, networks, encryption and key management, logging/monitoring, and the shared responsibility model. You can read an architecture diagram and challenge a control claim.
• Working knowledge of AI governance (NIST AI RMF or vendor AI risk) and a proactive interest in AI regulation.
• Clear communication of complex and critical information to a broad audience.
• Subject matter expertise in security best practices. and the ability to recommend risk treatment and escalate items for acceptance.
• A drive to learn unfamiliar domains and a willingness to work across departments as the product and data requirements evolve
• Autonomy and proactivity around driving work to completion in the face of ambiguity and across multiple stakeholders.
• Strong familiarity with data, data protection and privacy, and with compliance automation or GRC platforms (Vanta, Drata etc.)

What you can expect from Bluesight

• Opportunities to solve problems of scale across a tech-forward, fast-growing company
• Strong voice in what we work on, how it works, and how it is built
• Room to be creative and choose your own path
• Trust in your sense of ownership
• Coworkers who you'll learn from, who will push you and who are looking to learn from you

This position is open to applicants in the continental United States.