Hippocratic AI builds the safest generative AI healthcare agent for health systems, payors, and pharma. Over 180 million clinical interactions across 1,000+ use cases with 60+ partners worldwide. Backed by General Catalyst, Kleiner Perkins and a16z.
About the role
Hippocratic AI is looking for a GRC Program Lead to own and scale our governance, risk, and compliance program. Reporting to the CISO, you will be the central point of contact for certifications and attestations (SOC 2, HITRUST, HIPAA, ISO 42001), customer security assurance, U.S. and international data privacy, regulatory and AI governance initiatives, and enterprise risk management. Found on 1752vc Careers, the job board for startup and VC roles.
What they're looking for
- AI skillset and examples of use
- Bachelor's degree, CISM, CRISC, CHPC, or similar certifications preferred
- 5+ years in GRC, compliance, or audit, ideally in a healthcare or payor environment
- Strong working knowledge of healthcare regulations and frameworks, including HIPAA, HITRUST, SOC 2, and ISO 42001
- Working knowledge of international data protection and privacy law (GDPR and UK GDPR, cross-border transfers, data residency) and experience translating it into operational controls
- Hands-on experience with customer security assessments, TPRM portals, and GRC or trust-center tooling (e.g., Vanta)
More about this role
Hippocratic AI is looking for a GRC Program Lead to own and scale our governance, risk, and compliance program. Reporting to the CISO, you will be the central point of contact for certifications and attestations (SOC 2, HITRUST, HIPAA, ISO 42001), customer security assurance, U.S. and international data privacy, regulatory and AI governance initiatives, and enterprise risk management. You will work across Sales, Engineering, DevOps, Clinical, and Legal teams to keep our compliance posture ahead of the demands of health systems, payors, pharma and life-science partners, federal customers, and new international markets.
Framework and certification oversight: Maintain SOC 2 (including expansion of Trust Services Criteria), HITRUST, and HIPAA Privacy and Security attestations, along with data de-identification standards and applicable CMS regulations and federal guidelines.
ISO 42001 AI Management System: Implement and manage the AIMS program; drive gap remediation through a successful certification audit targeted for 2027.
International data compliance: Lead readiness and compliance workstreams for international expansion, including GDPR and UK GDPR, cross-border transfer mechanisms,...
Browse similar: AI jobs · AI startup jobs · Startup jobs · San Francisco Bay Area