Compliance Manager

About EliseAI

EliseAI develops cutting-edge conversational AI technology for industries fundamental to our lives: housing and healthcare. Everything is built on the foundation of health and home. Broken systems or ineffective processes in these domains have a disproportionate impact on our quality of life and society’s overall wellbeing. Conversely, any solution or technology that solves problems in these areas will have an impact that ripples far beyond them. 

That’s the only kind of impact we are interested in having at EliseAI. If you get excited by the thought of working really hard on these kinds of problems, then EliseAI is the right place for you.

About The Role

As the Compliance Manager, you will take the lead on managing the company’s compliance and IT posture, overseeing audits, ensuring adherence to security standards, and executing key security initiatives like Single Sign-On (SSO) rollout. You will also play a key role in managing compliance with frameworks such as SOC 2, PCI DSS, HIPAA, and more, while overseeing relationships with auditors and vendors.

You will manage projects related to compliance and security, working with HR and other teams to ensure that the company's systems and processes meet regulatory standards and are secure. 

Key Responsibilities:

Compliance Audits:

• Lead and manage internal and external compliance audits.
• Prepare and review audit documentation to ensure completeness and accuracy.
• Collaborate with third-party auditors to support successful audit outcomes, ensuring compliance with SOC 2, PCI DSS, HIPAA, and other relevant frameworks.
• Track audit findings and ensure prompt remediation of any non-compliance issues.

Security & Risk Management:

• Develop, implement, and manage security controls to meet compliance requirements (SOC 2, PCI DSS, HIPAA).
• Work to ensure systems and processes are secure and in compliance with industry standards.
• Maintain and update security policies and procedures to mitigate risks related to data protection, user access, and other compliance issues.

Vendor and Provider Management:

• Recommend and evaluate third-party vendors and service providers for security and compliance-related needs.
• Work with legal and procurement teams to ensure vendor contracts align with security and compliance standards.
• Monitor ongoing vendor compliance and ensure third-party audits are completed as necessary.

IT Compliance Tools & Systems:

• Utilize and manage compliance-related tools for auditing and security management (e.g., Jamf, Hexnode, SSO, provisioning and deprovisioning platforms).
• Oversee the configuration and management of tools to ensure they meet compliance requirements and are fully operational.
• Ensure proper logging and monitoring are in place for compliance and security purposes.

SSO & User Lifecycle Management:

• Oversee the implementation and management of Single Sign-On (SSO) systems and identity management platforms. Ensure secure and compliant user provisioning and deprovisioning, aligning with internal policies and regulatory requirements.

Onboarding & Offboarding Compliance:

• Lead initiatives to centralize IT tools and user access management systems. 
• Lead initiatives to optimize and streamline onboarding and offboarding processes, ensuring that user access is securely provisioned and deprovisioned in compliance with security policies.
• Collaborate with HR and other teams to maintain efficient workflows that protect company systems and data throughout the employee lifecycle.

Continuous Improvement:

• Stay up-to-date with the latest regulatory changes and industry best practices in IT compliance.
• Provide recommendations for improvements in processes, tools, and security measures to maintain compliance.
• Guide internal teams on IT compliance best practices and regulatory requirements.

Preferred Qualifications:

• Bachelor's degree in relevant field.
• 5+ years of experience in compliance, security, or audit roles, preferably in a startup or tech environment.
• In-depth knowledge of SOC 2, PCI DSS, HIPAA, and other relevant compliance frameworks.
• Strong experience with compliance tools such as Vanta, security audits, and managing third-party auditors.
• Experience with IT systems and tools such as Jamf, Single Sign-On (SSO), user provisioning and deprovisioning, and related security tools.
• Proven ability to manage complex projects and work cross-functionally