About Aegis Ventures

Aegis Ventures is a next-generation startup studio that partners with entrepreneurs and industry leaders to originate, launch, and scale transformative companies, with a focus on artificial intelligence. The Aegis platform brings together market-shaping ideas, permanent growth capital, and ambitious individuals who are driven to solve major societal problems. Our companies use technology to transform healthcare by dramatically improving quality, access, and cost. Aegis creates new companies with substantial input from our Digital Consortium of a dozen leading health systems and other ecosystem partners. We have launched 6 innovative companies to date and are just getting started.

About the Company

Avandra Imaging's mission is to unlock clinical data to overcome previously impossible medical challenges, bringing hope and medical breakthroughs that transform patient lives. Avandra is poised to revolutionize healthcare research and innovation by creating the largest indexed data cloud of medical imaging. This platform will unlock unprecedented access to real-world imaging data, essential for biopharma research, medical device innovation, AI model training, and improved patient care.

Leveraging its strategic acquisitions, Avandra aims to aggregate and de-identify vast amounts of imaging data, providing frictionless access to this invaluable resource. With a national footprint of over 5,000 customer integrations and a market share of approximately 70%, this robust infrastructure supports their core business, ensuring continued growth and cash flow to fuel their innovative data cloud platform.

About the Job

As our Compliance Lead, you'll own and operationalize our compliance program — turning our regulatory obligations into a scalable, audit-ready system that earns the trust of health systems, investors, and the patients behind the data. Avandra handles protected health information across a growing network of health system partners.

This is a build role. You'll work alongside our IT & Security Manager, contributing to security posture while owning the compliance workstream end-to-end. If you're energized by standing up programs — not just maintaining them — this is your role.

What You’ll Do

Compliance Program Management

Own Avandra's compliance roadmap across HIPAA, HITRUST, and SOC 2; drive certification timelines and recertification cycles.
Maintain the risk register and conduct company-wide risk assessments on a defined cadence.
Author, publish, and maintain security and compliance policies and procedures.
Evaluate emerging frameworks (ISO 27001, NIST CSF) for relevance as we scale.

Audit & Evidence Readiness

Coordinate evidence collection, gap assessments, and control testing across Engineering, Operations, and People teams.
Manage audit relationships with external assessors and compliance-automation platforms.
Maintain audit-ready documentation at all times — not just at audit season.

Vendor Risk Management

Own the vendor security intake and assessment process.
Respond to customer security questionnaires, RFPs, and due diligence requests; represent Avandra'scompliance posture credibly to health system partners.

M&A Compliance Integration

Conduct compliance assessments for acquisition targets — evaluate PHI handling practices, existing certifications, policy maturity, and open audit findings.
Own the post-acquisition compliance integration playbook: gap analysis, remediation roadmap, and timeline to bring acquired entities under the Avandra compliance umbrella.
Assess and rationalize subsidiary compliance programs; identify redundancies, coverage gaps, and certification consolidation opportunities.
Serve as the compliance integration contributor in cross-functional M&A workstreams alongside Legal, Finance, and Engineering.
Maintain a consolidated compliance posture across all entities — ensuring no subsidiary operates outside Avandra's policy and control framework.

Training & Culture

Develop and deliver company-wide compliance training, including onboarding programs tailored to acquired teams.