GRC Specialist

About Sully.ai

At Sully.ai, we are dedicated to revolutionizing healthcare by providing access to excellent medical care, which we believe is a fundamental human right. Our mission, 'One Human, One Doctor,' drives us to develop cutting-edge AI teammates that enhance the capabilities of clinicians. By doing so, we address critical healthcare challenges such as delays in care, misdiagnoses, and clinician burnout.

About The GRC Specialist Role

Sully.ai is seeking a highly motivated and results-driven GRC Specialist. This individual will be empowered to take self-action and drive outcomes independently, without needing constant direction. You will be crucial in identifying and mitigating security and compliance risks that could impact customer acquisition and ensure these issues do not hinder other teams from effectively serving clients. Key responsibilities include building and executing a Third-Party Risk Management program, ensuring all user devices meet security compliance, and developing a clear strategy for contractor virtual environments.

Key Responsibilities

• Identify and proactively resolve security and compliance risks that could impede customer acquisition.
• Design and implement a robust Third-Party Risk Management program, ensuring all user devices adhere to stringent security requirements.
• Develop and execute a forward-thinking plan for contractor virtual environments to guarantee security protocol compliance.
• Proactively discover and accurately document risk items, supporting findings with thorough research and evidence.
• Continuously seek opportunities to build efficiencies and automations in daily tasks, contributing to predictable and repeatable revenue growth.
• Collaborate cross-functionally to manage complex enterprise negotiations, ensuring adherence to security and compliance frameworks.
• Contribute to developing and implementing repeatable playbooks for outbound sales, demo conversions, and closed-won deals, supporting high-performing sales teams and onboarding.
• Systematize and drive revenue growth, improving demo conversion rates and leading complex, high-stakes enterprise negotiations.

Hard Requirements

• Demonstrated mastery of security and compliance frameworks, coupled with expertise in identifying and mitigating security risks.
• Strong analytical and problem-solving abilities, with a proven capacity to identify and resolve issues autonomously.
• Extensive experience in developing and implementing Third-Party Risk Management programs, ensuring comprehensive security compliance.
• Exceptional ability to operate independently within ambiguous environments, make decisive actions, and exhibit self-driven motivation.
• Proficiency in working with cloud-based security platforms, specifically in building and executing security and compliance programs.
• Robust technical skills, with deep expertise in security protocols, risk management, and various compliance frameworks.

Key Results (First 90 Days)

• Identify all potential security and compliance items that could impede customer acquisition.
• Resolve all identified security and compliance risks threatening company objectives or customer acquisition.
• Establish a comprehensive Third-Party Risk Management program utilizing existing solutions and integrate all current vendors into this platform.
• Achieve full compliance with security requirements across all user devices.
• Formulate a clear and actionable plan for contractor virtual environments.
• Ensure that security and compliance measures actively support, rather than hinder, other teams' ability to serve clients effectively.

Why Join Sully.ai?

• Revolutionize the antiquated $800B+ Healthcare market.
• Work alongside a team where over 50% are ex-founders – we hire A-players focused on impact.
• Operate with urgency, autonomy, and ownership; speed matters.
• Engage with real, first-of-their-kind problems at the cutting edge of AI and medicine.
• Make a tangible difference: help doctors reclaim their time and enable patients to receive faster, better care.

Key skills/competency

• Security Risk Management
• Compliance Frameworks
• Third-Party Risk Management
• Cloud Security
• Data Privacy
• Regulatory Compliance
• Information Security
• Audit & Assurance
• Policy Development
• Risk Assessment