Senior GRC Engineer

What You Will Do

• Lead and advance our HIPAA compliance initiatives, ensuring rigorous security standards across our environment.
• Lay the architectural groundwork for upcoming SOC 2 and HITRUST certifications.
• Own the implementation, configuration, and maintenance of continuous compliance automation platforms (e.g., Vanta, Drata, or Secureframe), integrating them deeply into our tech stack.
• Design and build automated evidence collection workflows using scripts (Python, Go, or similar) to pull data from our GCP environment, identity providers, and SaaS tools.
• Partner with DevOps to embed compliance checks directly into CI/CD pipelines.
• Conduct internal risk assessments and threat modeling tailored to cloud-native, health care environments.

What You Bring To The Role

• 6+ years of professional experience in Security Engineering, GRC Engineering, DevOps, or Cloud Security roles.
• Deep, practical understanding of HIPAA requirements and how to map them to technical cloud controls.
• Strong working knowledge of SOC 2 and HITRUST.
• Hands-on expertise with Google Cloud Platform (GCP) architecture, IAM, logging, and security best practices.
• Strong programming/scripting skills (e.g., Python, Bash) and experience working with REST APIs to automate evidence gathering.
• Proven experience implementing and maximizing modern continuous compliance tooling.
• Excited about applying technology to improve healthcare.

COMP | PERKS | BENEFITS

• $150,000 - $200,000 per year
• Equity in an early stage company
• Medical, dental, and vision insurance
• 401(k)
• Paid maternity / paternity leave
• Unlimited PTO
• Biograph Membership

WHY JOIN US?

• Innovation at the Core: Work with a forward-thinking team that merges the latest in health technology, data science, and personalized care.
• Collaborative Ecosystem: Work alongside engineers, designers, and clinicians to create groundbreaking solutions that redefine what's possible in healthcare.
• You will be part of a multidisciplinary team where innovation thrives, and every voice matters, contributing to a culture that values diverse perspectives and bold thinking.
• Opportunities for Growth: With Biograph, you're not just stepping into a role—you're joining a company where growth and development are prioritized. As we continue to scale and innovate, you will have opportunities to expand your expertise, take on new challenges, and make meaningful contributions to the broader healthcare landscape.
• A Purpose-Driven Mission: At Biograph, we're committed to more than just healthcare—we're focused on changing lives by extending healthspans and improving quality of life through personalized care.