Remote Compliance Manager

Summary

Join Flywheel as a Compliance Manager to manage our information security and healthcare GRC audit programs. This role requires managing internal and external audits, testing security control effectiveness, developing policies and procedures, and maintaining Flywheel’s compliance program.

Requirements

• Bachelor’s degree in related field
• Minimum 5 years of experience in compliance
• Hands-on expertise implementing SOC 2, ISO 27001, and HITRUST audit programs
• Extensive knowledge of global cyber regulations, compliance standards, and technology with a proven track record in implementing and managing security frameworks
• Significant experience in designing, developing, and managing security policies, procedures, and controls to safeguard critical assets
• Strong communication skills, can clearly convey security and risk topics to technical and non-technical stakeholders, and ability to work collaboratively in a team environment

Responsibilities

• Lead Flywheel’s SOC 2, HITRUST, ISO 27001, and 21 CFR Part 11 annual external audits
• Test and monitor security control effectiveness in GRC software Vanta
• Manage risk assessments, third-party vendor reviews, and corrective action plans
• Lead annual internal audit and quality management system implementation
• Develop information security policies and procedures
• Manage security awareness training program
• Act as a key liaison for audits, regulatory inquiries, and external assessments
• Comply with company policies, including security, confidentiality, and data protection requirements, to maintain a secure work environment

Benefits

Comprehensive benefits package