---
title: 'Compliance and Security Director at Bluesight'
canonical: 'https://feeny.ai/job/compliance-and-security-director-bluesight-united-states-8xgj41d0v41z'
type: 'job'
last_seen: '2026-11-06'
---

# Compliance and Security Director at Bluesight

- **Company:** Bluesight
- **Location:** United States
- **Compensation:** $155k–$170k
- **Employment:** full-time
- **Work type:** remote
- **Posted:** 2026-11-03
- **Last confirmed live:** 2026-11-06
- **Apply:** https://jobs.lever.co/bluesight/1861aaa3-6048-42c8-8b29-d6ac286ccdfa

## Job description

At Bluesight, our mission is to create groundbreaking solutions that increase efficiency, safety and visibility for health systems, hospital pharmacy, and pharmaceutical manufacturers.  We empower our customers to deliver the right medicine to the right patient at the right time, every time.  We are a high growth healthcare information technology company with a start-up 'vibe' but over 3,000 customers using our proven solutions.

What You'll Do: Bluesight is hiring a Director, Compliance and Risk to join our Legal team, reporting to the General Counsel. You will own our compliance posture (SOC 2, HIPAA), risk program, and customer-facing regulatory assurance. You will partner with the CTO/Security Officer and the Security Engineering team, which owns product security (AppSec, vuln mgmt, pen test, IR) and IT (endpoint, IAM). You will be responsible for owning, operating, and improving all aspects of our compliance and requirements for SOC2 and HIPAA. As our compliance landscape evolves alongside new technologies, we need someone deeply interested in charting the path forward for compliance and AI in healthcare software. In this role, you can expect to: Act as the hands-on driver leading our SOC2 compliance program and managing the annual audit and certification process. Own the Bluesight risk register, annual risk assessment, third-party/vendor risk, BCP/DR, and policy lifecycles. Engage in direct conversations with potential and current hospital customers regarding completing complex security and IT questions and concerns. Own the customer security review process: complete complex security and IT questionnaires from hospital customers and respond to technical questions and contract issues on compliance and security. Assess and document compliance controls across our cloud infrastructure (AWS), working with Engineering to validate configurations, access controls, logging, encryption, and shared responsibility boundaries for SOC 2 and HIPAA evidence. Partner with IT on endpoint protection, IAM, and access reviews, and own the audit evidence for them. Set up and extend our compliance automation platform. Conduct internal audits, train employees, and advise on security and compliance across Bluesight. Help shape and socialize our forward-looking compliance strategy, specifically navigating the intersection of healthcare data security and AI. Document your work and decision-making processes, and lead presentations and discussions with a broad audience Uphold a culture of collaboration, transparency, creativity, inclusion, and data-driven decisions.

Qualifications necessary for success in this role:

- Experience developing, implementing, and monitoring internal practices for SOC2, HIPAA, NIST, or ISO compliance standards.

- Familiarity with hospital security operations and the ability to accurately and credibly represent Bluesight's security posture and the maturity of our operations to customers.

- Working knowledge of cloud infrastructure and security (AWS preferred): IAM, networks, encryption and key management, logging/monitoring, and the shared responsibility model. You can read an architecture diagram and challenge a control claim.

- Working knowledge of AI governance ( NIST AI RMF or vendor AI risk) and a proactive interest in AI regulation.

- Clear communication of complex and critical information to a broad audience.

- Subject matter expertise in security best practices.  and the ability to recommend risk treatment and escalate items for acceptance.

- A drive to learn unfamiliar domains and a willingness to work across departments as the product and data requirements evolve

- Autonomy and proactivity around driving work to completion in the face of ambiguity and across multiple stakeholders.

- Strong familiarity with data, data protection and privacy, and with compliance automation or GRC platforms (Vanta, Drata etc.)

What you can expect from Bluesight:

- Opportunities to solve problems of scale across a tech-forward, fast-growing company

- Strong voice in what we work on, how it works, and how it is built

- Room to be creative and choose your own path

- Trust in your sense of ownership

- Coworkers who you'll learn from, who will push you and who are looking to learn from you

This position is open to applicants in the continental United States.

Why Bluesight? Bluesight’s culture is built on innovation and teamwork. There’s room to grow and opportunities to take initiative. You will partner with sharp, motivated teammates looking to disrupt a massive industry—and have fun doing it.  We truly believe that where you work and what you do matters.  Join us as we revolutionize the hospital pharmacy landscape! -Competitive salary -Time off when you need it – unlimited vacation days! -Generous insurance coverage -401k program with a company match -Fun, collaborative culture!

EOE AA M/F/VET/Disability

All qualified applicants will receive consideration for employment and will not be discriminated against on the basis of race, religion, color, national origin, sex, protected veteran status, disability, or any other basis protected by federal, state or local laws.

## About Bluesight

## Company Overview
- **One-liner**: Bluesight provides AI-powered software solutions that simplify hospital and pharmacy operations, including inventory management, compliance, procurement, and drug diversion monitoring.
- **Entity Type**: Private (total funding $49.9M across 5 rounds; stage not specified)
- **Headquarters**: Alexandria, Virginia, United States
- **Founded**: 2011
- **Founders**: Kevin MacDonald (Co-Founder & CEO) and Vijay Venkatesh

## Core Business
- Primary industry: Healthcare technology (hospital pharmacy operations)
- Target customers: Hospitals and health systems (B2B, enterprise); over 3,000 U.S. and Canadian hospitals currently use Bluesight
- Mission: Simplify the complexities of healthcare operations with best-in-class technology, ensuring every patient is protected and every dollar is optimized.

## Products & Services
- **KitCheck**: RFID-based inventory management for medication kits and trays, reducing waste and ensuring availability.
- **PrivacyPro**: Diversion surveillance and patient privacy monitoring, using AI to detect potential drug diversion and privacy breaches.
- **CostCheck**: Purchasing optimization platform that identifies drug spend savings and prevents overcharges.
- **340B Compliance**: Solution to maximize 340B savings while staying audit-ready.
- **Drug Shortage Management**: Tools to plan for and mitigate drug shortages before they disrupt care.
- **Patient Privacy Monitoring**: Automated monitoring of patient data access to detect privacy violations.
- **Prism (AI Platform)**: Agentic AI assistant that connects fragmented data (wholesalers, EHRs, dispensing cabinets, HR systems) to provide plain-language answers, proactive alerts, and automated workflows. Early adopters report up to 97% reduction in analysis and reporting time.

All products are SaaS, purpose-built for healthcare workflows.

## Market Standing
- **Valuation/Market Cap**: Not disclosed
- **Key Metric**: Annual revenue estimated at $30M (LinkedIn data); Total funding $49.9M
- **Notable Investors/Partners**: Not publicly disclosed in available sources
- **Growth Signals**: Doubled headcount in the past two years; currently 184 employees (+9% YoY); partnered with over 3,000 hospitals; recognized as Best-in-KLAS for Diversion and Privacy Monitoring, MedTech Breakthrough Award winner, and market leader in Kit & Tray Management. Example ROI: Sentara Health saved $3.45M in drug spend using CostCheck over two years.

## Competitive Advantages
- **Healthcare-native technology**: All solutions are built specifically for hospital pharmacy and compliance workflows, not adapted from generic tools.
- **Integrated data platform**: Prism connects data from wholesalers, EHRs, dispensing cabinets, and HR systems into a single view, enabling AI-driven insights and automated actions.
- **Comprehensive suite**: Covers inventory, procurement, diversion, privacy, 340B, and drug shortages under one vendor, simplifying vendor management and reducing costs.
- **Proven ROI**: Demonstrated savings and efficiency gains (e.g., 97% reduction in analysis time, millions in drug spend savings).
- **Agentic AI**: Proactively monitors operations and surfaces issues before teams need to ask.

## Strategic Focus
- **AI-first innovation**: Continued investment in the Prism platform to embed agentic AI across all product lines.
- **Product expansion**: Creating new product categories (e.g., drug shortage management, 340B compliance) to address emerging hospital needs.
- **Growth through customer partnerships**: Working closely with hospitals to co-develop solutions and drive adoption.
- **Scaling operations**: Expanding headcount and customer base while maintaining a startup-like agility.

## Why Work Here
- **Fully remote culture**: Most roles are remote within the United States; some hybrid positions in Austin, TX. In-person meeting attendance required occasionally.
- **Comprehensive benefits**: Unlimited vacation, full health insurance (medical, dental, vision), home office stipend, monthly health & wellness stipend, short- and long-term disability, 401K with up to 4% company match via Vanguard, paid parental leave.
- **Growth and learning**: Emphasis on career development, continuous learning, and investing in employees’ growth. The company has doubled in size recently, offering ample advancement opportunities.
- **Culture**: Described as inclusive, collaborative, and innovation-driven. Employees are treated as valued partners, not just contributors.
- **Impact**: Work directly impacts patient safety and hospital efficiency across thousands of healthcare facilities.

## Sources
1. [Bluesight Homepage](https://bluesight.com/)
2. [Bluesight Careers Page](https://bluesight.com/careers/)
3. [Bluesight About Page](https://bluesight.com/about/)
4. [LinkedIn Company Profile](https://www.linkedin.com/company/bluesight-inc)
5. [Bluesight Job Listings (Lever)](https://jobs.lever.co/bluesight/)

## Other roles at Bluesight

- [Senior Full Stack Software Engineer - Shared Services](https://feeny.ai/job/senior-full-stack-software-engineer-shared-services-bluesight-united-states-gvzpdzck0r2b) — United States
- [Accountant](https://feeny.ai/job/accountant-bluesight-united-states-r0s5g37vpjsd) — United States
- [Implementation Specialist - Procurement Solutions](https://feeny.ai/job/implementation-specialist-procurement-solutions-bluesight-united-states-b73aydg8b207) — United States
- [Spend Analyst - CostCheck](https://feeny.ai/job/spend-analyst-costcheck-bluesight-united-states-re8bzj1y7330) — United States
- [Privacy Program Optimization Manager – PrivacyPro](https://feeny.ai/job/privacy-program-optimization-manager-privacypro-bluesight-united-states-mhjfwxcta98w) — United States
- [Pharmacy Operations Optimization Manager – KitCheck](https://feeny.ai/job/pharmacy-operations-optimization-manager-kitcheck-bluesight-united-states-egv68q194rc6) — United States
- [Staff Software Engineer - 340B Check](https://feeny.ai/job/staff-software-engineer-340b-check-bluesight-united-states-6hsmw41fbmq5) — United States
- [Clinical Diversion Advisor](https://feeny.ai/job/clinical-diversion-advisor-bluesight-united-states-6a9w9ymwbadc) — United States
- [Customer Success Manager](https://feeny.ai/job/customer-success-manager-bluesight-united-states-10c1xt4f9bkm) — United States
- [Senior Customer Success Manager - Strategic Accounts](https://feeny.ai/job/senior-customer-success-manager-strategic-accounts-bluesight-united-states-h6ek4whgbman) — United States