The pay range for this position goes up to $170,000 and includes eligibility for an annual discretionary bonus in addition to base salary. The actual wage offered may be lower or higher depending on candidate experience, knowledge, skills, qualifications and geographic location in the United States 

 

Bluesight offers a full range of health and wellness, leave, and retirement benefits to employees. 

At Bluesight, our mission is to create groundbreaking solutions that increase efficiency, safety and visibility for health systems, hospital pharmacy, and pharmaceutical manufacturers. We empower our customers to deliver the right medicine to the right patient at the right time, every time. We are a high growth healthcare information technology company with a start-up vibe but over 3,000 customers using our proven solutions.

 

What Youll Do: Bluesight is hiring a Director, Compliance and Risk to join our Legal team, reporting to the General Counsel. You will own our compliance posture (SOC 2, HIPAA), risk program, and customer-facing regulatory assurance. You will partner with the CTO/Security Officer and the Security Engineering team, which owns product security (AppSec, vuln mgmt, pen test, IR) and IT (endpoint, IAM). You will be responsible for owning, operating, and improving all aspects of our compliance and requirements for SOC2 and HIPAA. 

As our compliance landscape evolves alongside new technologies, we need someone deeply interested in charting the path forward for compliance and AI in healthcare software.

In this role, you can expect to:

• Act as the hands-on driver leading our SOC2 compliance program and managing the annual audit and certification process.

• Own the Bluesight risk register, annual risk assessment, third-party/vendor risk, BCP/DR, and policy lifecycles.

• Engage in direct conversations with potential and current hospital customers regarding completing complex security and IT questions and concerns.

• Own the customer security review process: complete complex security and IT questionnaires from hospital customers and respond to technical questions and contract issues on compliance and security.

• Assess and document compliance controls across our cloud infrastructure (AWS), working with Engineering to validate configurations, access controls, logging, encryption, and shared responsibility boundaries for SOC 2 and HIPAA evidence.

• Partner with IT on endpoint protection, IAM, and access reviews, and own the audit evidence for them.

• Set up and extend our compliance automation platform.

• Conduct internal audits, train employees, and advise on security and compliance across Bluesight.

• Help shape and socialize our forward-looking compliance strategy, specifically navigating the intersection of healthcare data security and AI.

• Document your work and decision-making processes, and lead presentations and discussions with a broad audience

• Uphold a culture of collaboration, transparency, creativity, inclusion, and data-driven decisions.

 

Bluesight’s culture is built on innovation and teamwork. There’s room to grow and opportunities to take initiative. You will partner with sharp, motivated teammates looking to disrupt a massive industry—and have fun doing it. We truly believe that where you work and what you do matters. Join us as we revolutionize the hospital pharmacy landscape!

-Competitive salary

-Time off when you need it – unlimited vacation days!

-Generous insurance coverage

-401k program with a company match

-Fun, collaborative culture!