Spellbook

Spellbook

Compliance Analyst, US Compliance Programs

Remote - US · Director

Sponsorship not specified$53k-$800kDetected 63 days ago
Cloud PlatformsComplianceProcurementRecruitingCustomer SuccessHIPAACommunicationOrganizational SkillsInternal Audit

About the role

  • Legal teams worldwide trust Spellbook with sensitive, confidential, and privileged information, and we're looking for a Compliance Analyst to help us hold up our end of that trust.

Responsibilities

  • Drive readiness, implementation, and ongoing maintenance for frameworks such as TX-RAMP, GovRAMP, FedRAMP, HIPAA, SOC 2, and other security or privacy compliance obligations.
  • Manage compliance operations in platforms like Vanta - evidence collection, control monitoring, policy tracking, vendor documentation, employee compliance tasks, and audit-readiness workflows.
  • Lead government compliance initiatives, including control mapping, gap assessments, documentation packages, system descriptions, policy updates, and customer-facing compliance responses.
  • Maintain compliance artifacts including policies, procedures, risk registers, control narratives, system inventories, access reviews, training records, and audit evidence.
  • Partner with Sales and Customer Success on security questionnaires, public sector procurement requirements, and regulated customer due diligence.

Requirements

  • Experience in compliance, security assurance, GRC, audit, risk management, privacy, or a related function - ideally supporting a SaaS, cloud, AI, legaltech, fintech, healthtech, or public sector environment.
  • Familiarity with security and compliance frameworks such as SOC 2, ISO 27001, NIST 800-53, NIST CSF, HIPAA, FedRAMP, TX-RAMP, or GovRAMP.
  • Experience using compliance automation or GRC platforms such as Vanta, Linear, or similar tools.
  • Strong ability to read framework requirements, customer obligations, and regulatory guidance and convert them into actionable project plans.
  • Experience partnering with technical teams to understand systems, access controls, data flows, infrastructure, cloud environments, and security control implementation.
  • Excellent written and verbal communication skills, with the ability to explain compliance requirements in plain English to technical, legal, business, and executive audiences.
  • Experience supporting or implementing TX-RAMP, GovRAMP, FedRAMP, or other public sector cloud compliance initiatives.
  • Experience with NIST 800-53 control mapping, SSPs, POA&Ms, continuous monitoring, authorization boundaries, customer responsibility matrices, or audit evidence packages.
  • Hands-on experience collecting audit evidence, maintaining control documentation, tracking remediation, and supporting internal or external assessments.
  • Highly organized and comfortable managing multiple compliance workstreams, deadlines, audits, and stakeholder dependencies at the same time.
  • Pragmatic at distinguishing high-priority compliance risks from lower-impact administrative issues, and able to move with urgency in ambiguous environments.
  • US Citizenship and a non-expired US Passport or state-issued REAL ID driver's license.
  • Experience with HIPAA compliance, healthcare customer requirements, BAAs, ePHI safeguards, or healthcare security assessments.
  • Direct experience working with 3PAOs, external auditors, government assessors, or public sector procurement teams.

Compensation

  • Spellbook uses industry benchmark data to establish compensation bands for all roles.
  • The salary range listed for a position reflects the expected total wage range for the role-including base salary and on-target commissions, where applicable-and may span multiple career levels.
  • Final compensation is determined during the interview process based on factors such as experience, skills, scope, and role level.
  • In addition to base salary and applicable commissions, total rewards may include equity, health and wellness benefits, and other company programs.
  • Full details will be shared during the interview process.

Benefits

  • Implement and maintain US compliance program initiatives across government, healthcare, financial services, and enterprise SaaS customer requirements.

Company info

  • Spellbook is the most comprehensive AI copilot for transactional lawyers.
  • It works directly inside Microsoft Word to help legal teams draft, review, and negotiate contracts up to 10x faster and with greater precision.
  • Today, more than 4,000 law firms, in-house teams, and solo practitioners rely on Spellbook to simplify their workflows and eliminate the drudgery of everyday contract work.
  • We are backed by leading investors including Khosla Ventures, Thomson Reuters Ventures, Inovia Capital, The LegalTech Fund, Bling Capital, and Moxxie Ventures.
  • The company recently raised $50 million in Series B funding, led by Keith Rabois at Khosla Ventures, bringing its total funding to more than $80 million.
  • This is an existing vacancy

Visa & Work Authorization

  • US Citizenship and a non-expired US Passport or state-issued REAL ID driver's license
Apply directly at Spellbook →Create a free account for alerts like thisView Spellbook immigration profile

This listing is sourced directly from Spellbook's careers page and normalized into a canonical job model.