SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Nabla is an AI-powered clinical documentation assistant trusted by 100,000+ clinicians across 130+ healthcare organizations. The company recently raised $70M in Series C funding and is scaling its security and compliance programs to support enterprise growth in healthcare.
As GRC Manager, you will report to the Head of Information Security & Compliance and serve as a key bridge between Security, Engineering, Product, Legal, and customer-facing teams. You'll own the maturation and scaling of Nabla's governance, risk, and compliance programs—foundational work that enables the business to grow securely while maintaining trust with clinicians, healthcare organizations, and partners.
Key responsibilities include: managing the GRC control evidence library and investigating control flags; overseeing the vendor risk program from intake through ongoing monitoring; reviewing and interpreting security assurance artifacts (SOC 2 Type II, penetration tests, ISO certifications); assisting with implementation of security frameworks (GDPR, ISO, SOC 2); managing security questionnaires and client audits; tracking information security risks and remediation plans; administering security awareness training and access reviews; and owning the review and maintenance of organizational security policies and procedures.
You'll need 4+ years of GRC or Information Security experience, with demonstrated hands-on program building or scaling—ideally in high-growth SaaS or technology. Deep expertise in SOC 2 Type II and ISO 27001 is essential. Healthcare/HIPAA experience is strongly preferred. You should be comfortable with GRC platforms and tooling, risk assessment methodologies, and have relevant certifications (CISM, CRISC, CISA, CCSP, or equivalent). An AI-forward mindset and drive to automate manual processes is valued.
Nabla offers competitive salary and equity, comprehensive health coverage (medical, dental, vision at 100% individual coverage), unlimited PTO, unlimited sick leave, paid parental leave, and a remote-friendly culture with $1,000 home office equipment stipend.
About Nabla
Healthcare / Life Sciences; AI / Data / Infrastructure — AI assistant for clinical documentation and patient encounters.
