About the Opportunity 

Flywheel is seeking a dynamic and motivated Compliance Manager to manage our information security and healthcare GRC audit programs. Successful applicants will have a passion for collaboration, risk analysis, program management, and audit expertise. This role requires managing internal and external audits, testing security control effectiveness, developing policies and procedures, and maintaining Flywheel’s compliance program. 

Flywheel is a remote-first company headquartered in Minneapolis, Minnesota. Local employees may use our offices if they wish but this role is classified as remote and is open to any location within the United States.

Environment  

In this role, you will work closely with compliance, information security, and IT stakeholders, as well as external auditors and regulatory bodies. Our audit program is based on NIST and SOC 2 and includes compliance with HIPAA and other international standards. 

We’re highly responsive to customer needs and constantly strive to make a positive contribution to the biomedical and life sciences communities we serve. Team members are recognized and rewarded when advocating for customer success and satisfaction over other concerns. We value self-motivated, creative individuals who work well in a collaborative environment – constantly generating and sharing new ideas and solutions with the team.  

Flywheel has a comprehensive benefits package and encourages a balanced work life and home life. 

Responsibilities 

• Lead Flywheel’s SOC 2, and 21 CFR Part 11 annual external audits. 
• Test and monitor security control effectiveness in GRC software. 
• Manage risk assessments, third-party vendor reviews, and corrective action plans. 
• Lead annual internal audit and quality management system implementation. 
• Develop information security policies and procedures. 
• Manage security awareness training programs. 
• Act as a key liaison for audits, regulatory inquiries, and external assessments. 
• Comply with company policies, including security, confidentiality, and data protection requirements,         to maintain a secure work environment. 

What would make you a great fit 

• Bachelor’s degree in related field and minimum 5 years of experience in compliance. 
• Hands-on expertise implementing SOC 2, HIPAA, and NIST audit programs. 
• Extensive knowledge of global cyber regulations, compliance standards, and technology with a             proven track record in implementing and managing security frameworks. 
• Significant experience in designing, developing, and managing security policies, procedures, and   controls to safeguard critical assets.
• Strong communication skills to clearly convey security and risk topics to technical and non-technical       stakeholders, and ability to work collaboratively in a team environment.  
• Experience with medical imaging or healthcare IT systems (preferred but not required). 

About Us 

Flywheel is the leading research data platform that's transforming the way biomedical and imaging data are managed at leading life sciences, clinical, and academic institutions globally. 

Flywheel provides a comprehensive research data solution with all the tools needed for curation, imaging processing, machine learning workflows, and secure collaboration. By leveraging cloud scalability and automating research workflows, Flywheel helps organizations scale research data and analysis, improve scientific collaboration, and accelerate discoveries. 

Company Values 

 GO STEADY WITH LEVITY 

The alchemy of effective teamwork happens when we each take ownership of menial and magical every day. We’re serious, but never stuffy. We keep our cool under pressure because we assume best intentions and maintain perspective. This allows for true teamwork, with a dash of irreverence. 

WORK BETTER TOGETHER  

We are tenacious and united in our pursuit of solving our customers’ biggest challenges, and no challenge is too big. Diverse backgrounds across our team make us more effective as we listen, absorb, collaborate, and iterate to innovate. 

FIGURE IT OUT 

We’re obsessed with uncovering the why of any given. Having an open mind allows us to be quick to fail and quick to adapt. We relentlessly pursue continual improvement through learning and imagining new possibilities. 

GIVE A SHIT 

We’re fueled by grit, boundless energy, and a deep belief that we are doing cool shit. We don’t hesitate to stand up and speak out because we trust that through tough, honest discourse we can drive change and make a real difference for our customers and our mission.