SOC 2 + HIPAA Compliance Assistance (Vanta)

We are an early-stage AI software company actively working toward SOC 2 Type I certification, with HIPAA readiness as a parallel priority as we begin serving healthcare customers. Our compliance work is fully managed through Vanta, and we need an experienced specialist to help us close the remaining gaps and get audit-ready. What you'll be doing: - Review and finalize our Vanta policy library (15+ policies) - Identify any remaining SOC 2 gaps and provide a clear path to audit readiness - Advise on HIPAA readiness, including mapping HIPAA controls in Vanta alongside SOC 2 Requirements: - Hands-on experience with Vanta is required — you must know your way around its control library, policy editor, and test workflows - Solid understanding of SOC 2 Trust Service Criteria - Working knowledge of the HIPAA Security Rule and experience advising companies preparing for BAAs with healthcare customers - Experience supporting a company through a first-time SOC 2 audit or readiness assessment - Ability to work independently and deliver results async