GRC Analyst

Abridge was founded in 2018 with the mission of powering deeper understanding in healthcare. Our AI-powered platform was purpose-built for medical conversations, improving clinical documentation efficiencies while enabling clinicians to focus on what matters most—their patients.

Our enterprise-grade technology transforms patient-clinician conversations into structured clinical notes in real-time, with deep EMR integrations. Powered by Linked Evidence and our purpose-built, auditable AI, we are the only company that maps AI-generated summaries to ground truth, helping providers quickly trust and verify the output. As pioneers in generative AI for healthcare, we are setting the industry standards for the responsible deployment of AI across health systems.

We are a growing team of practicing MDs, AI scientists, PhDs, creatives, technologists, and engineers working together to empower people and make care make more sense.

The Role

We’re looking for an experienced GRC Analyst to join our growing US-based team. You’ll help run the risk-management and compliance programs at Abridge, and will work closely with other functions to define and meet our compliance goals.

What You'll Do

• Drive the development and implementation of processes and procedures for risk management and compliance. You will be instrumental in ensuring Abridge achieves and maintains certifications for frameworks such as SOC2, ISO, HIPAA, HITRUST, and FedRAMP.
• Manage compliance audit and certification processes, including liaising with vendors and auditors; project management; implementation; remediation; and certification.
• Drive audit readiness across the organization.
• Collaborate closely with other functions including the legal, engineering, IT, HR, and finance teams to ensure compliance requirements are well-defined; well-understood; and well-implemented across the organization.
• Help define and implement risk-monitoring programs to ensure that we are aware of and mitigating the primary risks to the organization, including regulatory, operational, financial, and reputational risks.

What You’ll Bring

• 3 years of experience in GRC functions. You have led large parts of an organization’s compliance program, and have delivered major certifications like ISO 27001 or FedRAMP
• Excellent project management skills. Your diligence ensures that projects are completed on time and at a high level of quality
• Excellent communication and collaboration skills. This role requires working across multiple functions to ensure that risk management and compliance requirements, schedules, and deadlines are incorporated into each function’s roadmaps and plans
• A keen understanding of the tradeoffs an organization might need to make when implementing a compliance framework, and the experience to help navigate those tradeoffs in a way that does not slow down the business
• Knowledge of industry best-practices and trends, and an enjoyment of learning new things
• Willing to pitch in wherever needed - as a fast-moving startup we need to do good work, quickly

Base Salary: $122,000 USD - $145,000 USD per year Equity

The salary range provided is based on transparent pay guidelines and is an estimate for candidates residing in the San Francisco Bay area. The actual base salary will vary depending on the candidate's location, relevant experience, skills, qualifications, and other job-related factors. Additionally, this role may include the opportunity to participate in a company stock option plan as part of the total compensation package.

Must be willing to work from our SF or NY office at least 3x per week

This position requires a commitment to a hybrid work model, with the expectation of coming into the office a minimum of (3) three times per week. Relocation assistance is available for candidates willing to move to the San Francisco Bay area.

We value people who want to learn new things, and we know that great team members might not perfectly match a job description. If you’re interested in the role but aren’t sure whether or not you’re a good fit, we’d still like to hear from you.

Why work at Abridge?

At Abridge, we’re driven by our mission to bring understanding and follow-through to every medical conversation. Our culture is founded on doing things the “inverse” way in a legacy system—focusing on patients, instead of the system; focusing on outcomes, instead of billing; and focusing on the end-user experience, instead of a hospital administrator's mandate.

Abridgers are engineers, scientists, designers, and health policy experts from a diverse set of backgrounds—an experiment in alchemy that helps us transform an industry dominated by EHRs and enterprise into a consumer-driven experience, one recording at a time. We believe in strong ideas, loosely held, and place a high premium on a growth mindset. We push each other to grow and expose each other to the latest in our respective fields. Whether it’s holding a PhD-level deep dive into understanding fairness and underlying bias in machine learning models, debating the merits of a Scandinavian design philosophy in our UI/UX, or writing responses for Medicare rules to influence U.S. health policy, we prioritize sharing our findings across the team and helping each other be successful.

How we take care of Abridgers:

• Generous Time Off: 13 paid holidays, flexible PTO for salaried employees, and accrued time off for hourly employees.
• Comprehensive Health Plans: Medical, Dental, and Vision plans for all full-time employees. Abridge covers 100% of the premium for you and 75% for dependents. If you choose a HSA-eligible plan, Abridge also makes monthly contributions to your HSA.
• Paid Parental Leave: 16 weeks paid parental leave for all full-time employees.
• 401k and Matching: Contribution matching to help invest in your future.
• Pre-tax Benefits: Access to Flexible Spending Accounts (FSA) and Commuter Benefits.
• Learning and Development Budget: Yearly contributions for coaching, courses, workshops, conferences, and more.
• Sabbatical Leave: 30 days of paid Sabbatical Leave after 5 years of employment.
• Compensation and Equity: Competitive compensation and equity grants for full time employees.
• ... and much more!

Diversity & Inclusion

Abridge is an equal opportunity employer. Diversity and inclusion is at the core of what we do. We actively welcome applicants from all backgrounds (including but not limited to race, gender, educational background, and sexual orientation).

Staying Safe - Protect Yourself From Recruitment Fraud

We are aware of individuals and entities fraudulently representing themselves as Abridge recruiters and/or hiring managers. Abridge will never ask for financial information or payment, or for personal information such as bank account number or social security number during the job application or interview process. Any emails from the Abridge recruiting team will come from an @abridge.com email address. Please exercise caution and cease communications if something feels suspicious about your interactions.