Lead Compliance Specialist

Lead Compliance Specialist

At IMO Health, we are seeking a highly motivated Lead Compliance Specialist to strengthen our Governance, Risk, and Compliance (GRC) program. In this role, you will help mature our security and compliance posture by managing risk assessments, control testing, audits, and cross-functional initiatives that support regulatory and customer requirements. The ideal candidate will bring expertise in frameworks such as SOC 2, HIPAA, HITRUST, and / or ISO 27001, and experience working in a fast-paced, cloud-first environment.

Impact You'll Make :

As our Lead Compliance Specialist, you'll serve as a key operational leader within our compliance programhelping ensure we meet the evolving expectations of regulators, auditors, partners, and customers. Your work will ensure policies, controls, and evidence are not only audit-ready but aligned to the business. You'll help shape a culture of compliance, reduce risk, and support trust in everything we do.

What You'll Do :

• Oversee vendor risk management activities and manage due diligence reviews.
• Partner with Security and HR teams to support training, awareness, and ethics initiatives.
• Track and manage risk remediation efforts across teams to ensure timely closure of gaps and findings.
• Contribute to the planning and execution of internal and external audits (e.g., SOC 2, HIPAA, HITRUST, ISO 27001).
• Develop, implement, and maintain policies, procedures, and controls aligned with regulatory requirements and industry frameworks (e.g., ISO 27001, NIST, HIPAA, HITRUST, SOC 2).
• Coordinate with Legal, IT, Security, HR, and Engineering to ensure cross-functional compliance.
• Contribute to risk assessments, including identification, analysis, and mitigation of security, privacy, compliance, and operational risks.
• Provide compliance guidance and support during customer security reviews and RFPs.
• Drive improvements to GRC processes, tools, and technologies.
• Prepare reports for senior leadership on GRC metrics, risks, compliance status, and emerging threats.
• Support incident response and post-incident reviews to ensure appropriate documentation, reporting, and follow-up actions.
• Train and mentor the organization on compliance processes and expectations.
• Monitor regulatory developments and support program updates in response to changes.

What You'll Need :

$75,000 - $115,000 a year

Compensation at IMO Health is determined by job level, role requirements, and each candidate's experience, skills, and location. The listed base pay represents the target for new hires with individual compensation varying accordingly. These figures exclude potential bonuses, equity, or sales incentives, which may also be part of the total compensation package. Our recruiter will provide additional details during the hiring process.

IMO Health also offers a comprehensive benefits package. To learn more, please visit IMO Health's Careers Page.