Senior Technical Compliance Manager
Komodo Health
We Breathe Life Into Data
At Komodo Health, our mission is to reduce the global burden of disease. And we believe that smarter use of data is essential to this mission. That’s why we built the Healthcare Map — the industry’s largest, most complete, precise view of the U.S. healthcare system — by combining de-identified, real-world patient data with innovative algorithms and decades of clinical experience. The Healthcare Map serves as our foundation for a powerful suite of software applications, helping us answer healthcare’s most complex questions for our partners. Across the healthcare ecosystem, we’re helping our clients unlock critical insights to track detailed patient behaviors and treatment patterns, identify gaps in care, address unmet patient needs, and reduce the global burden of disease.
As we pursue these goals, it remains essential to us that we stay grounded in our values: be awesome, seek growth, deliver “wow,” and enjoy the ride. At Komodo, you will be joining a team of ambitious, supportive Dragons with diverse backgrounds but a shared passion to deliver on our mission to reduce the burden of disease — and enjoy the journey along the way.
The Opportunity at Komodo Health
Team: Our compliance team manages regulatory adherence and risk mitigation within our organization. We meticulously assess and implement measures to ensure compliance with industry standards and regulations governing risk management, security processes, and data protection. Our team operates at the forefront of safeguarding our organization's integrity and reputation.
Mission: The Senior Technical Compliance Manager role exists to orchestrate and execute comprehensive compliance programs that align with industry standards, ensuring adherence to regulations and standards. By overseeing the development, implementation, and continuous improvement of compliance initiatives, the Senior Technical Compliance Manager safeguards our organization's integrity, fosters trust with stakeholders and fortifies our position as a leader in compliance excellence.
Looking back on your first 12 months at Komodo Health, you will have…
- Built effective functional relationships with key members of Komodo Health’s leadership team, including those from Legal Counsel, Information Security, People Operations, Technical Program Management, Engineering, and IT teams.
- Owned full accountability for the operationalization of compliance policies and processes related to SOC 2 certification, Third Party Risk Management, and other areas.
- Evangelized compliance initiatives and engaged with other key stakeholders to ensure adherence to policy guidelines and compliance standards.
You will accomplish these outcomes through the following responsibilities…
- Being a functional subject matter expert in the domain of third-party risk management, encompassing vendor due diligence, assessment, and oversight. Through comprehensive understanding and execution of third-party risk management frameworks, you will establish protocols to evaluate, monitor, and mitigate risks associated with external partners. This involves developing robust vendor risk assessment methodologies, conducting thorough reviews, and implementing proactive strategies to ensure compliance with industry standards and regulations.
- Being a functional subject matter expert on our SOC 2 processes, demonstrating mastery as the primary coordinator between internal stakeholders and external auditors. Your responsibilities will encompass cross-functional collaboration to define, design, implement, and continuously evaluate and monitor compliance and security controls, and ensure the successful pull-through of external assurance audits (e.g., SOC 2).
- Collaborating with security engineering and IT teams to ensure alignment between compliance requirements and security infrastructure design and processes.
What you bring to Komodo Health (required):
- 5+ years of hands-on expertise in SOC 2 compliance, with a proven track record of actively supporting SOC 2 audits and related due diligence activities. Proficiency in implementing and managing SOC 2 compliance programs aligned with industry standards. Experience in assessing controls, collecting evidence, and recommending improvements.
- 5+ years of demonstrated experience in third-party risk management, including proficiency in implementing and managing third-party risk management programs aligned with industry-standard frameworks. Experience should include conducting vendor risk assessments, overseeing due diligence activities, and evaluating vendor compliance with company policies and regulatory requirements such as GDPR, CCPA, or similar data protection regulations.
- Demonstrable experience in building and scaling compliance programs for growing organizations.
- Familiarity with compliance management tooling and platforms (e.g., OneTrust, Jira, Confluence, etc.).
- Strong presentation and communication skills, both written and verbal.
- Extensive experience in cross-functional stakeholder management.
Additional skills and experience we’ll prioritize…
- Experience working at startups or rapidly growing organizations
- Experience in healthcare data and life sciences industry a plus
#LI-JK1 #LI-Remote
Compensation at Komodo Health
The pay range for each job posting reflects a minimum and maximum range of pay that we reasonably expect to pay across all U.S. locations and may span more than one career level. We carefully consider multiple business-related factors when determining compensation, including job-related skills, work experience, geographic work location, relevant training and certifications, business needs and market demands.
Where You’ll Work
Komodo Health has a hybrid work model; we recognize the power of choice and importance of flexibility for the well-being of both our company and our individual Dragons. Roles may be completely remote based anywhere in the country listed, remote but based in a specific region, or local (commuting distance) to one of our hubs in San Francisco, New York City, or Chicago with remote work options.
What We Offer
This position will be eligible for company benefits in accordance with Company policy. We offer a competitive total rewards package including medical, dental and vision coverage along with a broad range of supplemental benefits including 401k Retirement Plan, prepaid legal assistance, and more. We also offer paid time off for vacation, sickness, holiday, and bereavement. We are pleased to be able to provide 100% company-paid life insurance and long-term disability insurance. This information is intended to be a general overview and may be modified by the Company due to business-related factors.
Equal Opportunity Statement
Komodo Health provides equal employment opportunities to all applicants and employees. We prohibit discrimination and harassment of any type with regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.