Director of Compliance, Tennr

• 6+ years of experience in compliance, risk, legal operations, or information security in a SaaS, healthcare, or regulated tech environment
• Deep familiarity with HIPAA and commercial compliance frameworks such as SOC 2, SOC 1, ISO 27001, and/or GDPR
• Proven ability to design and maintain internal controls, policy documentation, and audit readiness programs
• Experience running cross-functional compliance initiatives, including training, vendor risk management, and enterprise customer reviews
• Strong writing and organizational skills—able to create and manage detailed documentation for both internal and external use
• Excellent judgment, with the ability to assess legal and operational risk and escalate appropriately

Desirable

• We’re hiring a Director of Compliance to build and lead a cross-functional compliance program that spans both healthcare regulation and enterprise SaaS standards.
• This role will own policy development, internal controls, training, and audit readiness across the business. You’ll partner closely with Legal, Security, Product, and Customer-facing teams to proactively manage risk while enabling the company to scale with confidence
• You’ll be the primary owner of HIPAA compliance and commercial frameworks such as SOC 2, SOC 1, and ISO 27001—ensuring we meet the expectations of enterprise customers, regulators, and partners.
• This is a high-impact, high-ownership role that blends strategic policy design with hands-on execution. The ideal candidate is pragmatic, detail-oriented, and deeply comfortable operating across regulated environments and fast-moving startups
• Build and maintain a comprehensive compliance program spanning healthcare (HIPAA) and commercial SaaS standards (SOC 2, SOC 1, ISO etc.)
• Design, document, and enforce internal policies and controls that mitigate risk across legal, security, and operational domains
• Monitor changes in healthcare regulations and enterprise security standards, and update internal practices accordingly
• Own compliance-related documentation for internal use and external review, including security questionnaires, policies, attestations, and customer-facing materials
• Collaborate with Legal, Security, Product, and CX to embed compliance into onboarding, contracting, data handling, and day-to-day workflows
• Lead company-wide compliance training programs on topics such as privacy, data security, anti-harassment, and ethical conduct
• Oversee vendor risk management, including diligence, contracts, and ongoing compliance monitoring
• Serve as the primary liaison for audits, regulatory inquiries, and enterprise customer compliance reviews
• Build lightweight reporting systems to track compliance status, gaps, remediation progress, and escalations