Director of Compliance & AI Governance, AKASA
$150-185k
+ Equity
More information about location
3+ days a week in office
Generative AI solutions for the healthcare revenue cycle
Be an early applicant
Generative AI solutions for the healthcare revenue cycle
201-500 employees
Be an early applicant
$150-185k
+ Equity
More information about location
3+ days a week in office
201-500 employees
Company mission
To enable human health by building the future of healthcare with AI.
Role
Who you are
- 8+ years experience in security compliance, GRC, or risk management, including 2+ years leading a team or function. Healthcare SaaS, health tech, or AI startup experience strongly preferred
- Deep, hands-on expertise across HITRUST CSF (r2 preferred), SOC 2 Type II, HIPAA Security and Privacy Rules, and emerging AI governance frameworks like NIST AI RMF. You’ve run certification and audit cycles from start to finish and know how to translate AI governance standards into real controls for a company building on PHI
- An automation-first instinct: hands-on experience with GRC and continuous control monitoring platforms (Vanta, Drata, Hyperproof, or similar), evidence collection automation, and a track record of using AI tools (ChatGPT, Claude) to push the boundaries of what a lean compliance function can do
- End-to-end policy ownership: drafting, cross-framework mapping, and running review/exception/attestation cycles
- Comfort in front of customers: enterprise security questionnaires, sales-cycle support, BAA/security terms negotiation alongside Legal, and managing customer audits
- We’d love to see one or more of:
- Direct experience achieving or maintaining ISO 27001, ISO 42001, or HITRUST AI certifications
- Familiarity with the technical side of a modern security stack (Okta, MDM platforms like Kandji/Iru, SentinelOne, Nightfall, AWS) and the ability to partner credibly with Security and IT on control implementation
- Experience with privacy regulations beyond HIPAA, such as CCPA/CPRA, state health data laws, or GDPR
- Implementing Compliance Automation Tools and Trust Centers like Drata or Vanta
- Scripting or low-code automation skills (Python, Zapier, Tray.io) for building compliance workflows
- Relevant certifications such as CISSP, CISA, CIPP/US, HCISPP, or HITRUST CCSFP
What the job involves
- We’re looking for a strategic, automation-minded Director of Compliance & AI Governance to own and evolve AKASA’s compliance program as we scale
- This role is ideal for someone who has led compliance in a healthcare SaaS or AI environment and wants to build a modern, engineering-forward program rather than a paperwork factory
- You’ll own our HITRUST, SOC 2, and HIPAA programs end to end, operationalize emerging AI governance frameworks like the NIST AI RMF, and drive the policy lifecycle across the company
- The ideal candidate treats compliance as a product: automated evidence collection, continuous control monitoring, and policies people actually read and follow
- You’ll join a small, high-leverage team with immediate ownership and room to build
- You thrive in a fast-paced startup environment and are agile with an ownership mindset
- Own AKASA’s compliance certification portfolio end to end (including HITRUST CSF, SOC 2 Type II, and HIPAA) from control design and implementation through evidence collection, audit coordination, and remediation. Evaluate and pursue new certifications and attestations (such as ISO 27001, ISO 42001, and HITRUST AI) as customer and market needs evolve
- Define compliance roadmaps and ensure org-wide adoption, driving cross-functional alignment and accountability on regulatory requirements
- Build our AI governance program grounded in the NIST AI RMF, partnering with Engineering, Product, and Legal to establish model risk assessments, AI use policies, and documentation that meets enterprise health system expectations
- Drive compliance automation as a first principle: implement and optimize GRC and continuous control monitoring tooling, automate evidence collection across our stack (Okta, Google Workspace, Kandji/Iru, SentinelOne, Nightfall, AWS), and use AI tools to streamline policy drafting, control mapping, and audit preparation
- Own the full policy lifecycle, including authoring, review cadences, exception handling, attestation campaigns, and version control; ensuring policies are clear, practical, and mapped to the frameworks we certify against
- Be the compliance face of AKASA for customers and prospects: lead security and compliance questionnaire responses, support enterprise sales cycles, manage customer audits, and maintain trust artifacts including BAAs, our trust center, and shared assessments. Find ways to automate these processes using AI first tooling
- Oversee vendor and third-party risk management, the annual risk assessment, security awareness and HIPAA training programs, and incident response documentation and tabletop exercises in partnership with Security and IT
- Partner with Legal and Security leadership on all security-related contractual obligations
Our take
The US healthcare system is both financially and operationally complex. It is estimated to cost patients and providers $500 billion annually in medical billing and insurance administrative expenses. AKASA, formerly Alpha Health, addresses this issue with its Unified Automation technology
The technology is designed to streamline revenue cycle operations by combining human expertise with AI-driven automation. It deploys machine-learning tools supported by revenue cycle specialists who can handle more complex cases and refine the algorithms.
This blend of human and machine intelligence is a stand-out approach, which could well serve as a blueprint for other sectors. Meanwhile, AKASA will continue to help reshape the healthcare industry by solving its complex operational challenges.
Freddie
Company Specialist at Welcome to the Jungle
Insights
-17% employee growth in 12 months
Company
Funding (last 2 of 4 rounds)
Jun 2024
$120m
SERIES C
Mar 2021
$60m
SERIES B
Total funding: $205m
Company benefits
- Unlimited paid time off (PTO)
- Expansive coverage for health, dental, and vision
- Employer contribution to Health Savings Accounts (HSA)
- Generous parent leave policy
- Full employee coverage for life insurance
- Company-paid holidays
- 401(K) plan
Company HQ
The East Side, South San Francisco, CA
Leadership
Malinka Walaliyadde
(CEO & Co-founder)Previously worked at Andreessen Horowitz (a16z), Counsyl and Corning Life Sciences. They have an Engineering degree from Cornell University.
Andy Atwal
(VP of Engineering & Co-founder)Prior to AKASA, they were the founding Software Engineer at Counsyl, a health technology company offering DNA screenings for various diseases.
Ben Beadle-Ryby
(Co-founder)Previously, they were a Partner at the Advisory Board Company, where they oversaw revenue cycle consulting and technology.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 8 more jobs at AKASA