{"id":3701538,"url":"https://alion.io/job/bluesight-compliance-and-security-director","title":"Compliance and Security Director","company":{"id":6466,"name":"Bluesight","domain":"bluesight.com","url":"https://alion.io/company/bluesight","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":null},"role":"Leadership","role_family":"Leadership","seniority":"head","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":155000,"max":170000,"currency":"USD","period":"year","gross":null,"usd_annual":170000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"HIPAA","optional":false},{"name":"IAM","optional":false},{"name":"NIST AI RMF","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-11-03T15:59:26Z","employer_posted_date":"2026-11-03","last_verified_at":"2026-11-05T05:48:50Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"What You'll Do: Bluesight is hiring a Director, Compliance and Risk to join our Legal team, reporting to the General Counsel. You will own our compliance posture (SOC 2, HIPAA), risk program, and customer-facing regulatory assurance. You will partner with the CTO/Security Officer and the Security Engineering team, which owns product security (AppSec, vuln mgmt, pen test, IR) and IT (endpoint, IAM). You will be responsible for owning, operating, and improving all aspects of our compliance and requirements for SOC2 and HIPAA.\nAs our compliance landscape evolves alongside new technologies, we need someone deeply interested in charting the path forward for compliance and AI in healthcare software.\nIn this role, you can expect to:\nAct as the hands-on driver leading our SOC2 compliance program and managing the annual audit and certification process.\n\nOwn the Bluesight risk register, annual risk assessment, third-party/vendor risk, BCP/DR, and policy lifecycles.\n\nEngage in direct conversations with potential and current hospital customers regarding completing complex security and IT questions and concerns.\n\nOwn the customer security review process: complete complex security and IT questionnaires from hospital customers and respond to technical questions and contract issues on compliance and security.\n\nAssess and document compliance controls across our cloud infrastructure (AWS), working with Engineering to validate configurations, access controls, logging, encryption, and shared responsibility boundaries for SOC 2 and HIPAA evidence.\n\nPartner with IT on endpoint protection, IAM, and access reviews, and own the audit evidence for them.\n\nSet up and extend our compliance automation platform.\n\nConduct internal audits, train employees, and advise on security and compliance across Bluesight.\n\nHelp shape and socialize our forward-looking compliance strategy, specifically navigating the intersection of healthcare data security and AI.\n\nDocument your work and decision-making processes, and lead presentations and discussions with a broad audience\n\nUphold a culture of collaboration, transparency, creativity, inclusion, and data-driven decisions.\n\nQualifications necessary for success in this role:\nExperience developing, implementing, and monitoring internal practices for SOC2, HIPAA, NIST, or ISO compliance standards.\n\nFamiliarity with hospital security operations and the ability to accurately and credibly represent Bluesight's security posture and the maturity of our operations to customers.\n\nWorking knowledge of cloud infrastructure and security (AWS preferred): IAM, networks, encryption and key management, logging/monitoring, and the shared responsibility model. You can read an architecture diagram and challenge a control claim.\n\nWorking knowledge of AI governance ( NIST AI RMF or vendor AI risk) and a proactive interest in AI regulation.\n\nClear communication of complex and critical information to a broad audience.\n\nSubject matter expertise in security best practices. and the ability to recommend risk treatment and escalate items for acceptance.\n\nA drive to learn unfamiliar domains and a willingness to work across departments as the product and data requirements evolve\n\nAutonomy and proactivity around driving work to completion in the face of ambiguity and across multiple stakeholders.\n\nStrong familiarity with data, data protection and privacy, and with compliance automation or GRC platforms (Vanta, Drata etc.)\n\nWhat you can expect from Bluesight:\nOpportunities to solve problems of scale across a tech-forward, fast-growing company\n\nStrong voice in what we work on, how it works, and how it is built\n\nRoom to be creative and choose your own path\n\nTrust in your sense of ownership\n\nCoworkers who you'll learn from, who will push you and who are looking to learn from you","description_format":"text","description_chars":3818,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Health Care","Hospitals & Health Systems","Supply Chain","Pharmacies"],"lifecycle":[{"event":"open","at":"2026-11-03T19:40:18Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"green card filings: 2","filings_12m":0,"filings_prev_12m":1,"green_card_filings_12m":2,"median_offered_wage_usd":112500,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":35,"reasons":["conf:0","velocity","win:early"],"computed_at":"2026-11-05T05:54:30Z"},"pay":{"stated_usd_annual":170000,"is_top_pay":false},"html_url":"https://alion.io/job/bluesight-compliance-and-security-director","json_url":"https://alion.io/job/bluesight-compliance-and-security-director.json","meta":{"generated_at":"2026-11-05T10:42:59Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13645,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6466},"rest":"https://alion.io/mcp/rest/get_company?id=6466"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbluesight-compliance-and-security-director"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbluesight-compliance-and-security-director"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbluesight-compliance-and-security-director"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/bluesight-compliance-and-security-director\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbluesight-compliance-and-security-director"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3701538}},{"tool":"search_jobs","arguments":{"company":"bluesight.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3701538},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}