Director of Legal, Risk & Compliance, Medicom
$150-180k
Connected health information network
Be an early applicant
Connected health information network
21-100 employees
Be an early applicant
$150-180k
21-100 employees
Company mission
To reverse a century-long path towards increased waste by aggregating relevant clinical information.
Role
Who you are
- 8–12+ years of experience in information security, governance, compliance, and legal within healthcare, health tech, or SaaS environments
- CISSP strongly preferred (or equivalent advanced security certification)
- Deep working knowledge of HIPAA, SOC 2, HITRUST, GDPR, CCPA; FedRAMP experience strongly preferred
- Experience leading audits, certifications, and regulatory assessments
- Demonstrated experience reviewing and negotiating contractual language (MSAs, BAAs, DPAs, ISAs)
- Strong communication skills and ability to influence cross-functional stakeholders
What the job involves
- Medicom is seeking a Director of Legal, Risk & Compliance (GRC) to lead the Company’s information security, regulatory compliance, and contractual risk management programs
- As a healthcare data company, Medicom must meet the highest standards for data protection while supporting rapid product development and enterprise growth
- This role will own Medicom’s security and compliance frameworks (HIPAA, HITRUST, SOC 2, GDPR, FedRAMP readiness) while also serving as the primary reviewer of customer contractual obligations
- The Director will partner closely with Engineering, Sales, Legal, and executive leadership to ensure security, compliance, and legal commitments are aligned and operationally achievable
- You'll own and lead Medicom’s information security and compliance programs, ensuring adherence to HIPAA, HITRUST, SOC 2, GDPR, and evolving regulatory standards
- Define, document, and continuously improve the company’s security control framework and risk management processes
- Leadership sponsor for SOC 2 audits and other certification efforts, coordinating with third-party auditors and internal stakeholders
- Prepare the organization for advanced frameworks and certifications, including FedRAMP readiness
- Serve as chair of the Confidentiality & Security Team (CST), including meeting leadership and agenda setting
- Review and assess customer MSAs, BAAs, and ISAs to ensure alignment with Medicom’s security controls and compliance posture
- Partner with Sales and Legal during enterprise negotiations to balance commercial objectives with risk mitigation
- Ensure ongoing compliance with contractual obligations, federal and state regulations, and customer procurement policies
- Coordinate with external counsel as appropriate regarding legal contracts and compliance matters
- Partner closely with Engineering to embed security and compliance requirements into product design and architecture
- Act as a trusted advisor across the organization on security, compliance, and risk-related matters
Our take
Data in the healthcare sector is notoriously siloed. Different health systems and providers are poorly connected, making information exchange complex. This is what Medicom hopes to change with its federated health information network.
This approach sees medical image data from across all these different healthcare silos collected under a single interface. This way, practitioners across the healthcare sector can use this data to better inform decisions on patient care.
It's a valuable offering, and as more organizations participate, the network effect should strengthen the platform's value for all stakeholders. Backed by solid funding and strategic partnerships, Medicom is well positioned ot keep growing its tech and accelerating adoption across the market.
Steph
Company Specialist at Welcome to the Jungle
Company
Funding (last 2 of 5 rounds)
Apr 2024
$4.1m
LATE VC
Nov 2021
$21.8m
SERIES B
Total funding: $29.8m
Company benefits
- Ownership Matters: Stock options that make you part of the journey.
- Work from Anywhere: Remote-first flexibility, no strings attached.
- Comprehensive Coverage: Health, dental, vision & wellness that keep you at your best.
- Keep Growing: Learning & development support to level up your skills.
Company HQ
Downtown, Raleigh, NC
Leadership
Michael Rosenberg
(Founder & CEO)Founded the company in 2015, beginning as COO before becoming CEO in 2020. Before this, they were an Industrial Engineer at J.B. Hunt Transport.
Brian M.
(COO)Prior to Medicom, Brian was the CHief Strategy Officer at Research Square and VP of Finance at Teamworks. He also spent just over 9 years at Credit Suisse as a VP of Sales & Training and Investment Banking * Capital Markets.
Share this job
View 1 more job at Medicom