Psychiatric Medical Care
Director, Compliance
Northern Ireland
Posted about 22 hours ago
Get notified of more jobs like this · No spam, ever
How your CV stacks up
1Upload CV
2Analyse CV
3Improve CV
Upload your CV to see how well it fits this job role
?%
Job Type
Full-time
Description
Director, Compliance
Brado AI
Individual contributor, reporting to Chief Financial Officer
About The Role
The Director of Compliance owns and advances Brado AI's compliance program as we scale. This person bridges regulatory rigor with practical business execution, serving as our subject-matter authority on HIPAA, HiTRUST, and SOC 2. They build a culture of compliance across every team, partner with leaders and employees on day-to-day compliance activities, and keep the organization in a constant state of audit readiness.
What You'll Do
Program ownership & strategy
- Manage the end-to-end compliance program across for the company’s client offerings: HIPAA Privacy and Security Rules, SOC 2 (Type II), and HiTRUST CSF.
- Develop, maintain, and continuously improve policies, procedures, and controls to address evolving regulatory and contractual requirements.
- Own execution of the compliance roadmap set jointly with the VP, Legal & Compliance; support preparation of executive and board updates as needed. Includes evaluating a potential move to a single HiTRUST certification across both platforms, a decision still pending.
- Oversee development and ongoing maintenance of policies, guidelines, and systems for data privacy and security, working with domain experts to define and implement key controls.
- Own and maintain the legislative matrix: monitor federal and state regulatory changes and updates, and document where and how each change impacts the business and any actions required.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Audit & certification management
- Lead ISCC meetings.
- Lead and manage all external audits, assessments, and renewals — including the annual SOC 2 Type II engagement and the HiTRUST engagement — from scoping through report issuance.
- Coordinate with third-party auditors and assessors.
- Continuously monitor compliance with privacy and security frameworks so the organization is always audit-ready and in compliance.
- Manage and maintain Vanta as the system of record for continuous control monitoring and evidence collection.
- Conduct quarterly department-level compliance audits on a rotating basis, in addition to company-wide audits, to spread documentation and remediation work evenly across the year.
Risk & incident management
- Operate and mature the company's risk management framework, including regular risk assessments and risk register maintenance.
- Own the HIPAA Breach Notification process; lead investigations and coordinate required notifications to Covered Entities and vendors.
- Partner with Engineering and IT on vulnerability, patch management, and remediation prioritization.
- Serve as the point of contact for incident reporting and management, coordinating investigation and resolution with IT and Legal.
- Own disaster recovery and business continuity (DRBC) planning and execution, in partnership with IT.
Cross-functional collaboration
- Work closely with sales and contract teams to support customer security and privacy questionnaires, enterprise procurement processes, and business associate agreement (BAA) review.
- Partner with HR to deliver workforce compliance training, including annual HIPAA, privacy, and security awareness programs.
- Advise Product and Engineering on privacy-by-design principles and secure development practices.
- Facilitate the compliance committee, including developing agendas, reports, and information as requested by the committee, senior leadership, and/or the Board of Directors.
- Offer coaching and mentorship for managers and employees throughout Brado AI on domain expertise.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Requirements
What we're looking for
- 7+ years of experience in health care regulatory compliance and compliance leadership, with a deep understanding of HIPAA, key transactional systems (e.g. EMR), and ancillary communication systems (e.g. CRM).
- Familiarity with the compliance and security expectations of health system and health payor clients in a B2B SaaS sales cycle, including vendor risk assessments and enterprise procurement review.
- Experience operating in a SaaS or cloud-native environment (AWS or Azure).
- Bachelor's degree or equivalent experience.
- Willingness to complete all Brado AI and client-required training on healthcare industry regulations, including HCP processes and reporting, ethics, confidentiality, data privacy and security, and harassment prevention.
Trusted by 25,000+ job seekers
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
HIPAA Compliance
HiTRUST CSF
SOC 2 Type II
Risk Management
Audit Management
Data Privacy
Incident Management
Vanta
Regulatory Monitoring
Business Continuity Planning
Disaster Recovery
Privacy-by-Design
Vendor Risk Assessment
B2B SaaS Compliance
Policy Development
Cross-functional Collaboration
Location