--- title: 'Senior GRC Analyst at Ambience Healthcare' canonical: 'https://feeny.ai/job/senior-grc-analyst-ambience-healthcare-san-francisco-1j17et885b9p' type: 'job' last_seen: '2026-10-15' --- # Senior GRC Analyst at Ambience Healthcare - **Company:** Ambience Healthcare - **Location:** San Francisco, CA - **Employment:** full-time - **Work type:** hybrid - **Posted:** 2026-09-29 - **Last confirmed live:** 2026-10-15 - **Apply:** https://jobs.ashbyhq.com/ambiencehealthcare/799271c0-dd4b-4075-ab3f-b6d34db6debe ## Job description About Us: Here at Ambience, we never set out to be just another scribe. We’re building the AI intelligence platform that restores humanity to healthcare and drives meaningful ROI for health systems across the country. Our technology helps providers focus on delivering great care by removing the administrative burden that pulls them away from patients and away from their most impactful work. Ambience delivers real-time coding-aware documentation and clinical workflow support across ambulatory, emergency and inpatient settings at the top health systems in North America. Our teams operate relentlessly with extreme ownership to build the best solutions for our health system partners. We value candor, positivity and deep thought — and we expect a lot from each other because we know the problems we’re solving truly matter. Ambience was ranked #1 for Improving the Clinician Experience in the KLAS Research Emerging Solutions Top 20 Report, recognized by Fast Company as one of the Next Big Things in Tech, named one of the best AI companies in healthcare by Inc., and selected as a LinkedIn Top Startup in 2024 and 2025. We’re backed by Oak HC/FT, Andreessen Horowitz (a16z), OpenAI Startup Fund, and Kleiner Perkins — and we’re just getting started. The Role: Health systems trust Ambience with some of the most sensitive data there is, and proving that we deserve that trust is essential to every partnership we build. We are looking for a Senior GRC Analyst to own our governance, risk, and compliance program end to end, from SOC 2 and PHI governance to vendor and AI-model risk to the security evidence our customers rely on. This is a senior individual contributor role with a broad mandate and real latitude to shape how the program runs. We treat GRC as an agile, evolving practice rather than a checkbox exercise. That means doing the technical digging yourself: using AI coding tools like Claude Code to answer compliance questions directly from the codebase instead of routing every question through engineering. What You’ll Own: - Own the compliance program: Run SOC 2 end to end, including the auditor relationship, evidence collection and interpretation in Vanta, and continuous audit readiness as our infrastructure evolves. Help lay the groundwork for AI governance frameworks like ISO 42001. - Bring rigor to PHI governance: Build and maintain an authoritative inventory of where PHI lives and which systems and models touch it, and surface and close HIPAA and governance gaps. - Investigate controls first-hand: Use AI coding assistants analytically to verify whether a control (for example, encryption at rest) is actually implemented, producing clear, evidenced answers without engineering hand-holding. - Stand up vendor and AI-model risk reviews: Build and run the security review process for new vendors and AI model providers, partnering with legal and finance to bring every vendor into the fold with a documented risk assessment. - Drive risk to closure: Partner with engineering to enumerate, prioritize, and remediate security risks on a predictable, auditable cadence, and author the security and compliance policies that engineering, legal, and GTM teams can actually follow. - Be the front door for customer trust: Serve as first point of contact for RFPs and security questionnaires, and maintain a trust portal with current, customer-facing evidence. Who You Are: - Hands-on SOC 2 ownership: Senior-level GRC or compliance experience in a SaaS environment, including owning a SOC 2 (or equivalent) audit from evidence collection through auditor sign-off, ideally using a GRC automation platform like Vanta or Drata. - Technical curiosity: Comfortable using an AI coding tool like Claude Code to answer compliance questions directly from source code (you won’t need to write code yourself), and able to threat-model a new vendor: what data it touches, where that data flows, and what controls it needs. - Clear writing and communication: You write policies and standards that hold up to audit and that engineers can actually use, and you work directly and confidently with engineering, legal, and customers. - Startup ownership mindset: You thrive in ambiguity, take a partially built function and make it accountable without waiting for structure to be handed to you, and happily work outside a narrow swim lane. Nice-to-Have - Broader framework experience: ISO 27001 experience, and exposure to ISO 42001 or other AI governance frameworks. - Regulated-industry background: Experience in healthcare, fintech, or another highly regulated industry. Life at Ambience Working at Ambience means opting into a high-ownership, high-trust environment built for people who want to grow fast, operate decisively and focus on work that matters. This could be the right place for you if you want to - Work on mission-critical AI technology that directly improves clinicians’ day-to-day lives and health system financial health across some of the most complex, high-stakes workflows in the world. - Join a “dream team” culture where we hire exceptional people, expect exceptional outcomes and invest deeply in feedback and continuous growth. We operate as a championship team, and that means being ok with hard, uncomfortable, ambiguous problems that lead to real greatness. - Operate with real ownership and accountability in an environment where there are no bystanders: If something is broken, we fix it! You will have meaningful autonomy and be expected to drive work to completion. To help you do your best work, we pair these expectations with benefits intentionally designed to help you feel supported and safe at Ambience and beyond. Some of our key benefits include - Comprehensive medical, dental, and vision coverage for you and your dependents - 401(k) with a company match of up to 3% of base salary - A remote-friendly culture (with a San Francisco HQ) and full equipment provisioning to ensure you can work effectively from wherever you’re based. - Parental leave to support your family needs - Annual company-wide off-sites, team off-sites and regular team lunches and all-hands gatherings, with travel, lodging and meals covered - Flexible time off with no annual cap, company-wide holidays and an annual holiday shutdown from December 24–January 1 designed to support real rest and long-term sustainability. Ambience Healthcare is an equal opportunity employer and is committed to building a diverse and inclusive workplace. We do not discriminate on the basis of race, color, religion, sex, gender identity or expression, sexual orientation, national origin, age, disability, veteran status, genetic information, or any other legally protected status. We encourage applicants from all backgrounds to apply. Ambience is committed to supporting every candidate’s ability to fully participate in our hiring process. If you need any accommodations during your application or interviews, please reach out to our Recruiting team at accommodations@ambiencehealthcare.com. We’ll handle your request confidentially and work with you to ensure an accessible and equitable experience for all candidates. Ambience Healthcare has become aware of scams targeting jobseekers with fake jobs and even interviewing people. Our emails will always come from @ambiencehealthcare.com. We would never our ask candidates to download apps or make any form of payment(s). If you are contacted through WhatsApp, Telegram, similar but fake email domains, or asked to make a payment, these contacts are not legitimate. Report the issue immediately to LinkedIn and the [FBI](https://www.fbi.gov/how-we-can-help-you/scams-and-safety). ## About Ambience Healthcare ## Company Overview - **One-liner**: Ambience Healthcare provides an AI operating system for healthcare that reduces clinician administrative burden by delivering real-time, coding-aware documentation and clinical workflow automation across 200+ specialties. - **Entity Type**: Private (Series C) - **Headquarters**: San Francisco, California, United States - **Founded**: 2020 - **Founders**: Mike Ng and Nikhil Buduma ## Core Business - **Primary industry**: Healthcare IT / AI-powered clinical documentation and coding - **Target customers**: B2B – health systems, hospitals, and large medical groups across outpatient, emergency, and inpatient settings - **Mission or purpose**: Restore humanity to healthcare by eliminating documentation and coding burdens so clinicians can focus on patient care ## Products & Services - **Ambience AI Platform**: An ambient listening and AI documentation system that captures clinical encounters in real time and automatically generates structured, coding-aware notes. Integrates natively with Epic (via Epic Ambient Module and FHIR APIs), Oracle Cerner, athenahealth, and other major EHRs. - **Revenue Integrity & Coding**: Real-time ICD-10 and CPT code suggestions, HCC opportunity surfacing, and E/M level guidance embedded at the point of care to improve coding accuracy and audit defensibility. - **Specialty-Specific Modules**: Tailored workflows for 200+ specialties including oncology, psychiatry, emergency medicine, and rheumatology, adapting to the language and priorities of each domain. ## Market Standing - **Valuation/Market Cap**: Not disclosed (private company) - **Key Metric**: Total funding raised – $319.3M (as of August 2025) - **Notable Investors/Partners**: - Andreessen Horowitz (a16z) – co-lead Series C - Oak HC/FT – co-lead Series C - Kleiner Perkins – lead Series B - OpenAI Startup Fund – Series B participant - **Growth Signals**: - 185 employees with +3.5% monthly headcount growth - Operations in 5 countries (US, UK, Philippines, Canada, Germany) - Trusted by top health systems across North America (e.g., St. Luke’s – verified $13K revenue per clinician/year improvement) - 80% average utilization rate vs. 26%–40% for competitors - 45% reduction in charting time; 60 Net Promoter Score (vs. -10 to 12 for vendors) - 23 active job postings (as of mid-2026) ## Competitive Advantages - **Deep EHR integration**: Lives inside Epic Toolbox (Hyperdrive/Haiku) with no copy/paste, using native FHIR APIs – reduces friction and builds clinician trust. - **Specialty depth**: Supports 200+ specialties with tailored workflows, including complex domains like oncology and psychiatry where generic AI fails. - **Proven accuracy**: 99% E/M coding accuracy, 93% ICD-10 substantiation, 97% across all specialties (verified by AAPC and KLAS). - **Revenue integrity at point of care**: Combines documentation and coding into one seamless flow, reducing CDI queries and improving claim defensibility. ## Strategic Focus - Continue expanding into new care settings (inpatient, emergency) and specialties - Deepen integration with Epic and other EHRs to become the default ambient AI layer for health systems - Scale go-to-market with enterprise health systems across North America - Advance “clinical super intelligence” by combining frontier AI with real-world clinical feedback loops ## Why Work Here - **Mission-driven work**: Directly combat clinician burnout and improve patient care – “do work that matters” - **Remote-friendly**: Most roles allow work from anywhere in the U.S.; flexible hours with trust-based scheduling; quarterly team offsites and sponsored lunches at SF office - **Benefits**: Comprehensive medical/dental/vision, HSA/FSA, 401(k) with 3% company match (no vesting requirement), flexible PTO, 11 paid holidays, home office equipment kit - **Culture**: Values clarity, accountability, kindness, and trust; ideas evaluated on merit, not title; tight coaching loops and fast impact - **Growth stage**: High-growth speed with depth, quality, and rigor; opportunity to own complex challenges from day one ## Sources 1. [ambiencehealthcare.com](https://www.ambiencehealthcare.com/) 2. [ambiencehealthcare.com/careers](https://www.ambiencehealthcare.com/careers) 3. [linkedin.com/company/ambiencehealthcare](https://www.linkedin.com/company/ambiencehealthcare) 4. [builtin.com/company/ambience-healthcare](https://builtin.com/company/ambience-healthcare) 5. [jobs.ashbyhq.com/ambiencehealthcare](https://jobs.ashbyhq.com/ambiencehealthcare) ## Other roles at Ambience Healthcare - [Head of National Strategic Accounts](https://feeny.ai/job/head-of-national-strategic-accounts-ambience-healthcare-united-states-bmmravv385ge) — United States - [FP&A Lead](https://feeny.ai/job/fp-a-lead-ambience-healthcare-united-states-ey3jejt7xhfh) — United States - [Senior Product Marketing Manager (Chorus)](https://feeny.ai/job/senior-product-marketing-manager-chorus-ambience-healthcare-united-states-awx6ayjcrc64) — United States - [Senior Manager, Growth Marketing](https://feeny.ai/job/senior-manager-growth-marketing-ambience-healthcare-united-states-w9qnck088ec9) — United States - [Senior Software Engineer, Product](https://feeny.ai/job/senior-software-engineer-product-ambience-healthcare-san-francisco-gmd8c4ctcshs) — San Francisco, CA - [National Strategic Account Executive](https://feeny.ai/job/national-strategic-account-executive-ambience-healthcare-united-states-wgrbswync127) — United States - [Business Operations Lead](https://feeny.ai/job/business-operations-lead-ambience-healthcare-united-states-1wc7mwcpefn4) — United States - [Product Lead, Inpatient](https://feeny.ai/job/product-lead-inpatient-ambience-healthcare-san-francisco-5m4bf97qvwef) — San Francisco, CA - [Financial Controller](https://feeny.ai/job/financial-controller-ambience-healthcare-united-states-xgvrpm1efhne) — United States - [Staff Security Engineer](https://feeny.ai/job/staff-security-engineer-ambience-healthcare-san-francisco-ny0g4s3fbm6v) — San Francisco, CA