Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 3 days agoWe saw it 87 min after it went up

Compliance and Security Director

Bluesight13 open roles

Pay
$155,000 – $170,000 a year
Where
United States - Remote
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowCompliance and Security DirectorBluesight · United States - Remote

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Bluesight's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.5% of postings close within 7 days. Measured by our own scanner across the market. Bluesight postings stay open a median of 34 days.

Share of postings closed within
  1. 2.3%1 day
  2. 4.6%3 days
  3. 13.5%7 days
  4. 21.8%14 days
  5. 36.6%30 days
  6. 58.9%60 days
This job: posted 3 days ago

Bluesight median: 34 days open

The posting

At Bluesight, our mission is to create groundbreaking solutions that increase efficiency, safety and visibility for health systems, hospital pharmacy, and pharmaceutical manufacturers. We empower our customers to deliver the right medicine to the right patient at the right time, every time. We are a high growth healthcare information technology company with a start-up 'vibe' but over 3,000 customers using our proven solutions.

What You'll Do: Bluesight is hiring a Director, Compliance and Risk to join our Legal team, reporting to the General Counsel. You will own our compliance posture (SOC 2, HIPAA), risk program, and customer-facing regulatory assurance. You will partner with the CTO/Security Officer and the Security Engineering team, which owns product security (AppSec, vuln mgmt, pen test, IR) and IT (endpoint, IAM). You will be responsible for owning, operating, and improving all aspects of our compliance and requirements for SOC2 and HIPAA.

As our compliance landscape evolves alongside new technologies, we need someone deeply interested in charting the path forward for compliance and AI in healthcare software.

In this role, you can expect to:

  • Act as the hands-on driver leading our SOC2 compliance program and managing the annual audit and certification process.
  • Own the Bluesight risk register, annual risk assessment, third-party/vendor risk, BCP/DR, and policy lifecycles.
  • Engage in direct conversations with potential and current hospital customers regarding completing complex security and IT questions and concerns.
  • Own the customer security review process: complete complex security and IT questionnaires from hospital customers and respond to technical questions and contract issues on compliance and security.
  • Assess and document compliance controls across our cloud infrastructure (AWS), working with Engineering to validate configurations, access controls, logging, encryption, and shared responsibility boundaries for SOC 2 and HIPAA evidence.
  • Partner with IT on endpoint protection, IAM, and access reviews, and own the audit evidence for them.
  • Set up and extend our compliance automation platform.
  • Conduct internal audits, train employees, and advise on security and compliance across Bluesight.
  • Help shape and socialize our forward-looking compliance strategy, specifically navigating the intersection of healthcare data security and AI.
  • Document your work and decision-making processes, and lead presentations and discussions with a broad audience
  • Uphold a culture of collaboration, transparency, creativity, inclusion, and data-driven decisions.

Qualifications necessary for success in this role:

  • Experience developing, implementing, and monitoring internal practices for SOC2, HIPAA, NIST, or ISO compliance standards.
  • Familiarity with hospital security operations and the ability to accurately and credibly represent Bluesight's security posture and the maturity of our operations to customers.
  • Working knowledge of cloud infrastructure and security (AWS preferred): IAM, networks, encryption and key management, logging/monitoring, and the shared responsibility model. You can read an architecture diagram and challenge a control claim.
  • Working knowledge of AI governance ( NIST AI RMF or vendor AI risk) and a proactive interest in AI regulation.
  • Clear communication of complex and critical information to a broad audience.
  • Subject matter expertise in security best practices. and the ability to recommend risk treatment and escalate items for acceptance.
  • A drive to learn unfamiliar domains and a willingness to work across departments as the product and data requirements evolve
  • Autonomy and proactivity around driving work to completion in the face of ambiguity and across multiple stakeholders.
  • Strong familiarity with data, data protection and privacy, and with compliance automation or GRC platforms (Vanta, Drata etc.)

What you can expect from Bluesight:

  • Opportunities to solve problems of scale across a tech-forward, fast-growing company
  • Strong voice in what we work on, how it works, and how it is built
  • Room to be creative and choose your own path
  • Trust in your sense of ownership
  • Coworkers who you'll learn from, who will push you and who are looking to learn from you

This position is open to applicants in the continental United States.

Why Bluesight?

Bluesight’s culture is built on innovation and teamwork. There’s room to grow and opportunities to take initiative. You will partner with sharp, motivated teammates looking to disrupt a massive industry—and have fun doing it. We truly believe that where you work and what you do matters. Join us as we revolutionize the hospital pharmacy landscape!

-Competitive salary

-Time off when you need it – unlimited vacation days!

-Generous insurance coverage

-401k program with a company match

-Fun, collaborative culture!

EOE AA M/F/VET/Disability

All qualified applicants will receive consideration for employment and will not be discriminated against on the basis of race, religion, color, national origin, sex, protected veteran status, disability, or any other basis protected by federal, state or local laws.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Bluesight's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Bluesight's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Bluesight's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.