Spellbook

2 months ago

Compliance Analyst, US Compliance Programs

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 9 hours agoStatus: Live

Job Summary

Build and scale the US compliance program across government, healthcare, financial services, and regulated enterprise SaaS customers. Own framework readiness and audit-quality evidence for requirements such as TX-RAMP, GovRAMP, FedRAMP, HIPAA, and SOC 2, using tools like Vanta. Partner with Security/IT and cross-functionally with Engineering, Legal, Sales, and Customer Success to translate complex regulations into repeatable internal workflows and customer-facing responses.

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Legal, Risk & Compliance

Key Responsibilities

•Implement and maintain US compliance program initiatives across government, healthcare, financial services, and enterprise SaaS customer requirements.
•Drive readiness and ongoing maintenance for frameworks and obligations including TX-RAMP, GovRAMP, FedRAMP, HIPAA, SOC 2, and other security or privacy compliance needs.
•Manage compliance operations using platforms like Vanta, including evidence collection, control monitoring, policy tracking, vendor documentation, and audit-readiness workflows.
•Coordinate with external auditors, assessors, consultants, legal advisors, and certification bodies through each engagement phase.
•Lead government compliance initiatives and maintain compliance artifacts (policies, risk registers, control narratives, system inventories, access reviews, training records, and audit evidence).

Pay and Benefits

Salary: USD 144,000 - 180,000 annually

Equity and Bonus:Equity

Perks:EquityMeal AllowanceWellness StipendParental LeaveHealth Insurance

Key Requirements

•Experience in compliance, security assurance, GRC, audits, risk management, privacy, or a related function supporting SaaS, cloud, AI, legaltech, fintech, healthtech, or public sector environments.
•Familiarity with security and compliance frameworks including SOC 2, ISO 27001, NIST 800-53, NIST CSF, HIPAA, FedRAMP, TX-RAMP, or GovRAMP.
•Hands-on experience collecting audit evidence, maintaining control documentation, tracking remediation, and supporting internal or external assessments.
•Experience using compliance automation or GRC platforms such as Vanta, Linear, or similar tools.
•Ability to translate framework requirements and regulatory guidance into actionable plans and communicate them clearly to technical, legal, business, and executive audiences.

Experience:SaaSCloudAILegaltechFintechHealthtechPublic sector

Skills:CommunicationOrganizationRisk triageStakeholder managementCross-functional collaboration

Licenses:REAL ID driver's license

Certifications:CISACRISCCISMCISSPCCSKISO 27001 Lead Implementer/AuditorCIPP/US

Tech Stack:Microsoft WordVantaLinearSOC 2ISO 27001NIST 800-53NIST CSFHIPAAFedRAMPTX-RAMPGovRAMPAIAutomationGRCCompliance tooling

Eligibility

Nationality:US National

Company Brief

Spellbook

Provides an AI-powered contract drafting and review platform for legal professionals, automating contract clause generation, analysis, and risk spotting to accelerate document creation and improve consistency across transactional workflows.

Industry: LegalTech

Website

Loading job details...

Preparing the role view and application actions.

Spellbook

2 months ago

Compliance Analyst, US Compliance Programs

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 9 hours agoStatus: Live

Job Summary

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Legal, Risk & Compliance

Key Responsibilities

•Implement and maintain US compliance program initiatives across government, healthcare, financial services, and enterprise SaaS customer requirements.
•Drive readiness and ongoing maintenance for frameworks and obligations including TX-RAMP, GovRAMP, FedRAMP, HIPAA, SOC 2, and other security or privacy compliance needs.
•Manage compliance operations using platforms like Vanta, including evidence collection, control monitoring, policy tracking, vendor documentation, and audit-readiness workflows.
•Coordinate with external auditors, assessors, consultants, legal advisors, and certification bodies through each engagement phase.
•Lead government compliance initiatives and maintain compliance artifacts (policies, risk registers, control narratives, system inventories, access reviews, training records, and audit evidence).

Pay and Benefits

Salary: USD 144,000 - 180,000 annually

Equity and Bonus:Equity

Perks:EquityMeal AllowanceWellness StipendParental LeaveHealth Insurance

Key Requirements

•Experience in compliance, security assurance, GRC, audits, risk management, privacy, or a related function supporting SaaS, cloud, AI, legaltech, fintech, healthtech, or public sector environments.
•Familiarity with security and compliance frameworks including SOC 2, ISO 27001, NIST 800-53, NIST CSF, HIPAA, FedRAMP, TX-RAMP, or GovRAMP.
•Hands-on experience collecting audit evidence, maintaining control documentation, tracking remediation, and supporting internal or external assessments.
•Experience using compliance automation or GRC platforms such as Vanta, Linear, or similar tools.
•Ability to translate framework requirements and regulatory guidance into actionable plans and communicate them clearly to technical, legal, business, and executive audiences.

Experience:SaaSCloudAILegaltechFintechHealthtechPublic sector

Skills:CommunicationOrganizationRisk triageStakeholder managementCross-functional collaboration

Licenses:REAL ID driver's license

Certifications:CISACRISCCISMCISSPCCSKISO 27001 Lead Implementer/AuditorCIPP/US

Tech Stack:Microsoft WordVantaLinearSOC 2ISO 27001NIST 800-53NIST CSFHIPAAFedRAMPTX-RAMPGovRAMPAIAutomationGRCCompliance tooling

Eligibility

Nationality:US National

Company Brief

Spellbook

Industry: LegalTech

Website