Governance, Compliance, and Risk Analyst

About the Company

EliseAI is improving the industries that matter most: housing and healthcare. By integrating AI agents deeply into existing workflows, we make them more efficient, reduce costs, and improve the experience for everyone.

Responsibilities

• Support and manage ongoing compliance programs across frameworks such as SOC 1, SOC 2, PCI, HITRUST, and HIPAA
• Coordinate audit activities, including evidence collection, documentation preparation, and responses to auditor requests
• Track compliance requirements and proactively follow up with stakeholders on outstanding items
• Conduct vendor risk assessments and manage third-party due diligence processes
• Complete first-pass reviews of vendor and client security questionnaires (DDQs)
• Maintain and update security and compliance policies and supporting documentation
• Review security-related legal documents, including security addenda, in partnership with Legal and Security teams

Requirements

• 2–5 years of experience in Governance, Risk, and Compliance, Information Security, or a related field
• Familiarity with common compliance frameworks such as SOC 2, PCI-DSS, HIPAA, or HITRUST
• Experience supporting audits and managing evidence collection processes
• Understanding of vendor risk management and third-party due diligence processes
• Strong organizational skills and excellent communication skills
• Ability to work in person at our office 4-5 days a week

Benefits

• Equity in the company
• Medical, Dental and Vision premiums covered at 100%
• Fully paid parental leave
• Commuter benefits
• 401k benefits
• Fitness & home services stipend
• Collaborative in-office environment with all meals covered
• Unlimited vacation and paid holidays
• Relocation packages available