[Hiring] Senior Manager, Compliance & Audit @mpathic

Role Description

mpathic is seeking a Senior Manager, Compliance & Audit to own and scale the compliance and audit programs that support our technology, customers, and continued growth. This is a hands-on role for someone who can move comfortably between regulatory requirements, technical systems, external auditors, and internal teams. You’ll lead our audit and certification lifecycle across:

• SOC 1
• SOC 2 Type II
• ISO/IEC 27001
• ISO/IEC 42001
• FDA 21 CFR Part 11

You’ll partner closely with engineering, security, product, delivery, and operations to translate requirements into practical controls, automate evidence wherever possible, and ensure our systems and processes can stand up to scrutiny from auditors, customers, and regulated-industry partners.

Qualifications

• 7+ years in IT compliance, GRC, audit, or computerized systems validation, including direct ownership of external audits from scoping through final report or certification.
• Hands-on experience applying FDA 21 CFR Part 11 and GxP data integrity requirements to software or SaaS systems.
• Experience writing or leading validation deliverables such as validation plans, requirements traceability, risk-based test evidence, and validation summary reports.
• Experience leading or supporting SOC 1 and SOC 2 Type II examinations and ISO/IEC 27001 certification or surveillance audits.
• Comfortable reviewing cloud configurations across AWS, GCP, or Azure; IAM policies; CI/CD and change management records; logging; and infrastructure as code.
• Able to plan and execute internal audits, sample and evaluate evidence, write clear findings, and drive corrective and preventive actions (CAPAs) through closure.
• Comfortable representing mpathic with external auditors, certification bodies, customers, and sponsor quality teams.
• Able to write policies, findings, and customer responses that engineers can act on and executives can confidently approve.
• Understanding that strong compliance programs should enable teams to move quickly and responsibly.
• Certifications such as CISA, ISO/IEC 27001 Lead Auditor or Lead Implementer, ISO/IEC 42001 Lead Auditor, ASQ CQA, or CISSP are a plus.

Requirements

• Plan and run the annual audit and certification cycle for SOC 1, SOC 2, ISO/IEC 27001, ISO/IEC 42001, and Part 11 readiness.
• Own Part 11 compliance for systems that create, modify, or store regulated records.
• Maintain a unified control set mapped across applicable frameworks.
• Run a risk-based internal audit program, including ISO-required internal audits and management reviews.
• Build controls into how mpathic develops and delivers its products and services.
• Monitor control health, identify and escalate gaps early, and drive remediation with control owners.
• Maintain mpathic’s ISO/IEC 42001 AI management system.
• Own responses to security questionnaires, customer and sponsor quality audits, and compliance-related portions of RFPs and contracts.
• Own our GRC platform and its integrations.
• Maintain the policies and SOPs required by our certifications and regulatory commitments.
• Track changes to FDA guidance, AI governance requirements, and applicable data privacy laws.

Benefits

• The base salary range for this role is $140,000–$180,000, depending on experience, skills, and qualifications.