We're looking for a Compliance Engineer to join a Product & Engineering team responsible for executing technical work that supports audits and compliance across both internal systems and client-facing products. This role directly contributes to ensuring platforms meet regulatory standards while helping scale a growing compliance program in a fast-moving, mission-driven environment.
Key Responsibilities
- Perform technical evidence gathering for audits and compliance reviews
- Create and maintain system documentation including data stores and data flows involving sensitive information
- Execute release certifications and track certification requirements including regulatory reporting obligations
- Help shape compliance strategy with leadership, including the integration of AI tooling into the compliance program
- Drive cross-functional implementation and validation of compliance requirements across systems and workflows
- Build and maintain automated test suites to validate compliance requirements across pre-production and production environments
- Support audit readiness and execution (e.g. HITRUST, SOC 2)
- Continuously improve compliance processes, tooling, and documentation
Requirements
- 2+ years of experience in a technical role supporting compliance or regulated environments (e.g. support desk, SRE, or software engineering)
- Strong ability to produce clear, accurate compliance documentation for both technical and non-technical audiences — policies, checklists, audit evidence, deployment guides
- Experience supporting external audits (HITRUST, SOC 2, or similar frameworks)
- Hands-on experience with AI-assisted tools and willingness to integrate AI into compliance workflows — required
- Strong cross-functional communication skills with the ability to work across engineering, product, and non-technical stakeholders
- Good level of spoken and written English: able to communicate compliance and technical topics clearly across distributed teams
- Ability to work during Pacific Standard Time (PST) hours
Preferred Qualifications
- Preferred certifications: CCSFP (HITRUST), CISA, CISM, or CISSP
- Familiarity with HIPAA and HITRUST environments and compliance frameworks
- Experience with automated testing frameworks for compliance validation
- Background in regulated health tech or data-sensitive SaaS environments
- Exposure to observability and monitoring tools (e.g. Datadog, New Relic)
Conditions
- Fully remote role with working hours aligned to Pacific Standard Time (PST)
- Compensation in USD via a convenient payment method
- Direct collaboration with founders and fast decision-making
- High level of ownership and the opportunity to directly shape a growing compliance program