The Security Compliance Manager leads the organization’s security compliance and assurance efforts—ensuring we meet and maintain certification requirements (e.g., ISO 27001, SOC 2) and always remain audit-ready. This role translates security control requirements into actionable work across teams, drives evidence collection and remediation, and strengthens risk management practices to enable growth in regulated environments.

What You’ll Be Working On

• Lead security certification & audit readiness (ISO 27001 / SOC 2): Drive quarterly ISO control requirements, manage ISO surveillance audits, lead SOC 2 examination readiness, and oversee ongoing maintenance activities once achieved.
• Operate the ISMS controls program: Manage internal ISMS control reviews, coordinate remediation and corrective actions, and ensure controls remain effective and scalable as the organization changes.
• Evidence management & auditor response: Prepare for internal and external audits by organizing requests, gathering evidence, maintaining audit artifacts, and authoring clear, consistent responses to auditors.
• Risk management program execution: Recommend and implement improvements to the information security risk management program; develop and maintain the risk register, risk ownership, and workflows for tracking remediation plans to closure.
• Metrics, reporting, and stakeholder enablement: Partner with Security leadership to define and report KRIs/KPIs for the information security program; support consistent responses to customer security audits and questionnaires aligned to program commitments.
• Manage periodic reviews and updates of security policies and procedures to ensure alignment with certifications, business needs, and regulatory expectations.  
• Partner with an outsourced/internal audit function to validate control performance and drive continuous improvement.  
• Support cross-functional education and adoption of security requirements by translating compliance language into clear tasks, owners, and acceptance criteria.

What You Bring to OneStudyTeam

• Required: Experience leading a successful ISO 27001 or SOC 2 certification effort.
• Required: 5+ years in a dedicated information security role in a regulated environment (e.g., HIPAA, GLBA, PCI).
• Preferred: Security certification such as CISA, CISM, CISSP (or similar).
• Demonstrated ability to lead ISO 27001 and/or SOC 2 certification efforts and ongoing maintenance activities.
• Strong competency in gap analysis and risk assessment methodologies; able to translate results into prioritized remediation plans.
• Working knowledge of security policy, procedure, and enforcement across key domains: access control, data classification, change management, asset management, BCDR, incident response, vulnerability management, secure SDLC, source control, endpoint protection.
• Ability to translate security/compliance requirements into actionable work for Engineering/IT/Operations (tickets, owners, acceptance criteria, evidence).
• Strong written and verbal communication—able to interface with all levels of the organization and produce high-quality audit-ready documentation.
• Technical foundation sufficient to understand high-level concepts related to public cloud (AWS/GCP/Azure), Agile SDLC, CI/CD, VPNs, and modern web applications.
• This role requires 100% of work to be performed in a remote office environment and requires the ability to use keyboards and other computer equipment.
• This is a remote position with less than 10% travel requirements. Occasional planned travel may be required as part of the role.

The expected salary range for this role is $130,000 - $160,000 USD per year for full time team members.

As a Senior Data Scientist, you will play a pivotal role in advancing Reify Health’s data-driven solutions for clinical trials. In this position, you will drive the development of statistical models and machine learning algorithms to improve patient enrollment and trial management. You’ll work in a highly regulated healthcare data environment, ensuring compliance with privacy standards while innovating on predictive analytics. This role involves close collaboration with cross-functional teams (especially ML Engineering) to translate complex data insights into practical, impactful tools for the clinical research community.

What You’ll Be Working On

• Site Randomization Forecasting: Develop/enhance forecasting models for site randomization and enrollment trends, enabling better planning and resource allocation across trial sites. 
• Patient Matching/Ranking Algorithms: Support projects to build algorithms that intelligently match patients to (or rank patients for) appropriate clinical trials, enhancing recruitment efficiency and patient inclusion. 
• Develop Other Advanced Statistical Models: Create and refine predictive models (Bayesian inference, regression analysis, time-series forecasting) to address other key clinical trial challenges and improve decision-making. 
• AI Monitoring and Bias Detection: Implement processes to monitor machine learning models in production, detecting bias or performance drift and ensuring models remain fair, accurate, and compliant. 
• Data Pipeline & Tooling Development: Build and optimize data pipelines and analytical workflows using tools like AWS Athena, Redshift, SageMaker, and dbt, enabling scalable model training and deployment. 
• Regulatory Compliance in Data Science: Ensure all data science practices align with HIPAA, GDPR, and other privacy regulations, integrating compliance considerations into model development and data handling. 
• Cross-Functional Collaboration: Work closely with machine learning engineers, product managers, and other stakeholders to integrate models into products and clearly communicate insights and recommendations. 

What You Bring to OneStudyTeam

• Education: Master’s or Ph.D. in Statistics, Data Science, Computer Science, or a related quantitative field (or equivalent professional experience). 
• Experience: 5+ years of hands-on data science or analytics experience, preferably in a healthcare, clinical research, or other highly regulated data environment.
• Statistical & ML Expertise: Strong foundation in statistical modeling and machine learning techniques, including experience with Bayesian methods, regression analysis, and time-series forecasting. 
• Model Monitoring & Fairness: Proficiency in evaluating model performance and bias, with the ability to implement AI monitoring tools and bias mitigation strategies to ensure ethical and reliable outcomes. 
• Technical Toolset: Advanced programming skills in Python (with libraries such as scikit-learn, PyMC, mlforecast, etc.) and SQL, as well as familiarity with data transformation tools like dbt. 
• Cloud & Data Infrastructure: Hands-on experience with cloud-based analytics and ML services, especially AWS tools (Athena for querying, Redshift for data warehousing, SageMaker for model development/deployment). 
• Regulated Data Handling: Experience working with sensitive healthcare or clinical trial data under regulations like HIPAA and GDPR, demonstrating a deep commitment to data privacy and security best practices. 
• Collaborative Communication: Excellent teamwork and meticulous verbal/written communication abilities, with a track record of partnering with engineering and product teams to translate data science work into actionable business solutions. 
• Domain Knowledge: Understanding of clinical research or health-tech environments is highly valuable, including insight into clinical trial operations and a passion for improving patient outcomes through data.

The expected salary range for this role is $140,000 - $190,000 USD per year for full time team members.

#LI-Remote

We are seeking a Senior Security Compliance Analyst with expertise in Governance, Risk, and Compliance (GRC) to support and enhance our security and compliance programs within the healthcare industry. This role is critical in ensuring adherence to industry regulations, responding to customer audits, and maintaining compliance with ISO 27001, HIPAA, and other security frameworks.

The ideal candidate will be a detail-oriented compliance expert who can navigate complex regulatory environments, assist with internal/external audits, and drive continuous improvement in security governance. The ideal candidate must be able to operate independently while delivering on the following duties.

What You’ll Be Working On:

• Lead and support customer security audits, responding to security questionnaires and demonstrating compliance with security frameworks.
• Prepare, coordinate, and manage ISO 27001 audits, including evidence collection, control implementation, and auditor engagement.
• Ensure ongoing compliance with HIPAA, NIST CSF, and other regulatory requirements applicable to healthcare data security.
• Develop and maintain policies, procedures, and security documentation to meet regulatory and contractual obligations.
• Perform gap analyses and risk assessments to identify and remediate compliance risks.
• Manage and improve security governance frameworks, ensuring alignment with industry best practices and business objectives.
• Conduct third-party vendor risk assessments, ensuring compliance with security policies and contractual obligations.
• Monitor security controls, ensuring effectiveness and continuous improvement in alignment with security frameworks.
• Support security awareness training initiatives, ensuring employees understand compliance responsibilities.
• Stay current on ISO 27001, HIPAA, NIST 800-53, and other relevant standards, translating them into actionable security controls.
• Assist in defining security metrics and reporting on compliance status and risk posture to leadership.
• Work closely with legal, security, IT, and business teams to align compliance requirements with security operations.

What You’ll Bring to OneStudyTeam:

By joining our team as a Senior Machine Learning Engineer, you will play a pivotal role in building cutting-edge AI products that directly impact how new therapies reach patients. We’re looking for an experienced ML engineer who is passionate about turning advanced AI research into scalable, real-world solutions. You thrive on solving complex problems, pay close attention to detail, and consistently seek to automate and improve processes. You shine as a collaborator and excel as an individual contributor, with the courage to tackle challenging problems and the humility to learn and adapt. Your initiative and discipline allow you to thrive while working remotely, and your high degree of empathy and communication skills makes you the kind of colleague everyone wants on their team. As an integral member of our fast-growing organization, you will leverage AI to transform clinical research and improve patient care.

What You’ll Be Working On:

• Build and deploy AI-driven products that accelerate clinical trials and improve patient outcomes. Your work will deliver scalable machine learning solutions to complex, real-world problems in clinical research.
• Develop advanced ML models and LLM-powered agents for critical use cases like patient recruitment, enrollment forecasting, and study feasibility. You’ll also help expand our AI knowledge base architecture to support these innovative solutions.
• Leverage modern cloud tools and MLOps best practices to build robust data pipelines and deploy models at scale. You’ll use technologies like Python (and Clojure), AWS services (Athena, Bedrock, SageMaker, etc.), dbt, Prefect, and CI/CD automation with monitoring to ensure models are reliable and up-to-date.
• Collaborate across teams of data scientists, product managers, designers, engineers, and domain experts to integrate AI capabilities into our platform (including Care Access products). Ensure these AI solutions seamlessly support and enhance clinical research workflows for end-users.
• Continuously learn and innovate. Stay up-to-date with the latest developments in ML/AI (LLMs, NLP, probabilistic modeling, etc.) and proactively bring new ideas to the team. You’ll have the freedom to experiment with cutting-edge techniques and turn promising prototypes into production features that drive our mission forward.

What You’ll Bring to OneStudyTeam:

• Extensive ML engineering experience: 5+ years of hands-on experience building and deploying machine learning solutions in production at scale. Proven ability to implement end-to-end ML pipelines from data ingestion to model serving for real-world applications used by real people.
• Strong programming and data skills: Proficiency in Python and its ML ecosystem (pandas, scikit-learn, TensorFlow/PyTorch), with clean and efficient coding practices. Comfortable working with large datasets, writing complex SQL queries, and leveraging modern data processing frameworks. Experience with functional programming (e.g. Clojure) is a plus but not required.
• Cloud and MLOps expertise: Experience with modern cloud infrastructure (AWS or similar) and containerization tools like Docker. Familiarity with MLOps best practices such as CI/CD pipelines, automated testing, and monitoring model performance/data drift to ensure reliable, scalable deployments.
• Deep ML/AI knowledge: Strong understanding of machine learning fundamentals (model selection, training, evaluation, feature engineering) and statistical modeling. Familiarity with NLP and large language models is important.
• Analytical problem-solving: Ability to break down complex problems and devise effective, efficient ML solutions. You balance pragmatic engineering with scientific rigor, ensuring models are not only accurate but also performant and maintainable in production.
• Mission-driven and business-focused mindset: A passion for our mission to speed up clinical trials and improve patient outcomes. Empathy for patients, clinicians, and researchers drives you to build unbiased AI solutions.

The expected salary range for this role is $140,000 - $190,000 USD per year for full time team members.

The Director, Sales Strategy & Value is a key role which supports the global sales organization across pricing, proposal development, value analysis, contract structuring, and go-to-market strategy. The incumbent will partner with account executives and sales leaders as well as cross-functional stakeholders in delivery, finance, legal, and operations. The sales team supports all solutions across the OneStudyTeam and Care Access portfolio.

What You’ll Be Working On:

• Sales Strategy and Proposal Development: Serve as partner and advisor to Account Executives to produce high caliber proposals, optimized pricing, and appropriate deal structures. Articulate customer value as a natural component of Reify Health’s solutions. Support a range of opportunities ranging from single-study projects to multi-product enterprise agreements.
• Value Engineering: Be the architect of financial success stories. Conduct deep-dive value analyses to quantify cost savings and efficiency gains, translating complex data into compelling narratives that resonate with customers.
• Contract Development: In partnership with sales leaders, legal, and other stakeholders, translate proposals into formal contracts. Support customer negotiations with creative problem solving.
• Pricing: Develop and enhance pricing models for a range of software and services offerings. Quantitatively analyze the impact of pricing and bundling strategies.
• Go-to-market strategy: Research and analyze market data to inform broad planning and customer engagement. Use creative problem solving to translate product strategy into GTM motions in partnership with sales and executive leadership.
• Client Relationships: Participate in client meetings across discovery, proposal, and delivery stages. The role includes both direct relationship building and supporting others across sales and delivery.

What You’ll Bring to OneStudyTeam:

• Experience in B2B software and services; experience in life sciences is a plus
• Background in management consulting, banking, or similar desired
• 4+ years of experience managing complex projects as an individual contributor or project lead
• Highly proficient in data analysis, synthesizing qualitative and quantitative inputs, and visual storytelling
• Experience translating proposals into contracts
• Experience as a trusted advisor to customers, prospects, and partners
• Ability to solve complex business problems and build scalable processes
• Ability to build relationships effectively in a geographically dispersed, largely remote environment
• Excellent project and process management skills; ability to prioritize in a fast-paced work environment, pivot quickly based on changing business needs, and manage time appropriately
• Expert skills in Excel / GSheets and PowerPoint / GSlides

The expected salary range for this role is $150,000 - $180,000 USD per year for full time team members.

By joining our team as the Senior Director of Engineering, this role is responsible for our mission critical products. You will lead a high-impact engineering organization of 10-15 people. This role requires a versatile leader who can directly manage core teams while simultaneously coaching and scaling other teams through a direct-report Engineering Manager. Your work will help to:

• Drive the comprehensive platform strategy and execution that will serve as the core technological enabler for next-generation, AI-based services. This platform is foundational to injecting intelligence and automation across the entire clinical trials life cycle, from protocol design and site selection to patient recruitment, data management, and regulatory submission.
• Lead the development of "Steel Threads": end-to-end working software deployed to production that solve specific, high-friction site use cases (e.g., simplifying patient enrollment or site-specific study instructions).
• Oversee the acceleration strategy to enable continuous delivery without additional risk, ensuring the Site App remains performant and reliable, all while operating in a highly regulated industry.

What You’ll Be Working On

• Work with Product Management and Design to shape the product.
• Work with your leads and architects to build a platform that can scale and rapidly meet business objectives. This role is an active participant in the architectural design of the product.
• Contribute to the construction of a technical roadmap. 
• Recruit, hire and retain engineers
• Influence our organizational design as we rapidly scale the engineering team.
• Foster a healthy and collaborative culture that embodies our team values.
• Create lasting change in all aspects (people, process and technology) that will enable the organization to achieve rapid product delivery

What You’ll Bring to OneStudyTeam

• You take an empathetic approach towards leadership. 
• While you are not expected to be developing, as a former engineer, you can hold your own in technical conversations.
• Engineering management experience with a strong track record of rapidly shipping products on schedule with Agile processes.
• An innate ability to not just lead your teams but effectively influence the broader organization. You are the person who former employees want to work for again!
• Strong knowledge and experience leveraging SaaS based engineering principles.
• Experience working remotely. We have a distributed engineering team with remote-first processes.
• A deep desire to learn the domain in support of your ability to lead your organization.
• An ideal candidate will have experience working with data heavy applications.

The expected salary range for this role is $190,000 - $250,000 USD per year for full time team members.

The Director of Security leads enterprise security strategy and execution across governance, risk, compliance, and security engineering. This role manages the GRC and Security Engineering teams, partners with technology and business leaders, and ensures the design and operation of secure systems and processes across the organization. 

The Director is accountable for program maturity, audit readiness, and continual improvement. The scope includes third party risk, vendor assessment and qualification, security architecture oversight, AI related security assessments and guidance, incident response leadership, and budget ownership for security programs. 

This is a hands-on, technical leadership role with high autonomy that blends strategic program leadership with practical execution. The Director will develop roadmaps and metrics, allocate resources, and ensure alignment with business priorities and regulatory obligations.

What You’ll Be Working On:

• Lead and manage the GRC and Security Engineering teams, including strategy, objectives, staffing, coaching, and performance management. 
• Own governance, risk, and compliance programs. Maintain ISO 27001 and related controls. Drive audit readiness for HIPAA and other frameworks. Coordinate policy lifecycle management and control testing. 
• Run vendor assessment and qualification program. Oversee third party risk management, due diligence, contractual security requirements, and continuous monitoring. 
• Provide AI related security assessments and guidance. Establish acceptable use guardrails for AI, assess model and data risks, and advise on controls for AI enabled solutions. 
• Oversee security architecture for cloud environments and enterprise platforms. Partner with engineering on secure design for AWS, Azure, identity, network, and data protection. 
• Direct security engineering operations. Manage EDR and threat detection with CrowdStrike, SIEM operations, CSPM posture management, vulnerability management, and SOAR automation. 
• Lead incident response readiness and execution. Run tabletop exercises, coordinate investigations, and deliver root cause and lessons learned. 
• Own and manage security budgets, multiyear planning, vendor contracts, and cost optimization while meeting control objectives. 
• Report program status and risk posture to executives and the board. Define and track KPIs and KRIs. Communicate clearly with technical and non technical stakeholders. 
• Establish and enforce secure software development practices and SDLC controls with engineering leadership. 
• Maintain a current security roadmap and maturity plan aligned to business priorities. 
• Oversee metrics, dashboards, and reporting for program performance and risk reduction. 
• Coordinate with Legal, Privacy, and Compliance on regulatory obligations and customer security assessments. 
• Champion security awareness training and culture, sponsor targeted training for engineering and high risk roles. 
• Evaluate, select, and manage strategic security vendors and platforms, drive successful implementations and integrations. 
• Represent security in customer meetings and due diligence, provide credible technical and compliance answers. 

What You’ll Bring to OneStudyTeam:

• 15+ years of progressive experience in information security or related fields. 
• 10+ years of management experience leading security teams, including people leadership and program ownership. 
• Bachelor's degree in Computer Science, Engineering, Information Security, or related field.  
• Relevant certifications strongly preferred. Examples include CISSP and CISM.
• [Proven leadership of security programs at enterprise scale. Ability to set strategy, drive execution, and deliver measurable outcomes. 
• Demonstrated expertise in governance, risk, and compliance programs, including driving the implementation of ISO27001, SOC2, or HITRUST certification. 
• Experience with AI security risk management, data protection for AI use cases, and acceptable use guardrails for AI and large language models. 
• Strong background in secure software development, application security, and SDLC controls, including threat modeling and secure coding practices. 
• Hands-on knowledge of cloud security for AWS and Azure, identity and access management, network security, data protection, and key management.

The expected salary range for this role is $190,000 - $240,000 USD per year for full time team members.

#LI-Remote