Information Security & Data Privacy Lead

About Us

Augnito is the next gen Voice AI powering the healthcare industry. Augnito empowers medical professionals and streamlined clinical workflows with cloud-based, AI speech recognition that offers ergonomic data entry with 99% accuracy, without the need for voice profile training, from any device, anywhere.

From the outset, Augnito was built in close partnership with clinicians, using human-centered design, to create an AI natural language processing engine to fit your needs – not the other way around. As a result, Augnito offers excellent support for a wide variety of clinical vocabulary and workflows and can halve your clinical reporting and admin time, increase revenue, prevent physician burnout, eliminate transcription waiting delays, and enable you to focus your energy on patient care – not documentation. Augnito is currently deployed at 300+ hospitals and health systems and has a growing presence in 20+ countries, including the US, UK and Canada

Role Overview

We are looking for a legal and compliance leader to drive Data Privacy, Protection, and Information Security Governance at Augnito. The role will be responsible for ensuring compliance with global healthcare and privacy regulations, strengthening information security governance, and building scalable compliance frameworks across the organization.

The ideal candidate should have a strong background with hands-on experience in privacy laws, regulatory compliance, audit management, and information security governance within a SaaS or healthtech environment.

Key Responsibilities

Data Privacy & Compliance

• Lead compliance initiatives for GDPR, HIPAA, India DPDP Act, UAE PDPL, KSA PDPL, SOC 2, and
• ADHICS.Maintain RoPA, data retention policies, consent records, and cross-border transfer documentation.
• Drive Privacy by Design and conduct DPIAs/PIAs across systems and processes.
• Manage Data Subject Rights (DSR) requests, privacy incidents, and breach response processes.
• Draft and maintain privacy policies, governance frameworks, and compliance documentation
• Act as the primary SPOC for customer privacy reviews, auditors, and regulatoryqueries.

Information Security Governance

• Manage and strengthen the organization's ISMS and security governance framework.
• Ensure compliance readiness for ISO 27001, ISO 42001, SOC 2, and customer security assessments.
• Lead risk assessments, internal audits, compliance reviews, and corrective action tracking.
• Partner with Engineering and IT teams on cloud security, access controls, and security best practices.
• Monitor evolving privacy and cybersecurity regulations and advise leadership on compliance risks.

Legal Operations & Corporate Governance

• Draft, review, and negotiate legal documents including SaaS agreements, licensing, NDAs, term sheets, and investment documentation.
• Maintain and track the IPR repository, IP renewals, and filings.

Collaborate with the Company Secretary for board resolutions, AGMs, and secretarial filings.

Contract Lifecycle Management

• Manage the end-to-end lifecycle of all SaaS-based agreements: SLAs, DPAs, vendor and partner contracts.

Customer Trust & Regulatory Governance

• Act as the central point of contact for customer trust, privacy, and security assurance activities, including responding to security/privacy questionnaires (RSPs), customer audits, and demonstrating compliance with frameworks such as HIPAA, GDPR, ISO 27001, SOC 2, and regional healthcare regulations.
• Serve as the organization's liaison with regulatory bodies, auditors, and industry forums (including ADHICS), while proactively tracking evolving privacy, cybersecurity, and healthcare compliance trends to strengthen organizational readiness.

Awareness & Training

• Conduct privacy and information security awareness programs across teams.
• Track policy acknowledgements, compliance trainings, and audit readiness.
• Build cross-functional compliance ownership through SPOC- driven governance.

Qualifications

• Bachelor's/master's degree in law (LLB/LLM) is mandatory
• 5+ years of experience in data privacy, legal compliance, or information security governance, preferably in healthcare SaaS or technology organizations
• Strong understanding of global privacy laws, healthcare compliance, ISMS frameworks, and security governance
• Experience managing audits, customer compliance reviews, and regulatory assessments

Preferred Certifications

• CIPP
• ISO 27001 Lead Auditor/Implementer
• ISO 42001
• CISM
• GDPR Practitioner Certification

Good to Have Certifications

• CIPM
• HCISPP

Augnito India Pvt. Ltd. is an equal opportunities employer .We are committed to providing equal opportunities throughout employment including in the recruitment, training and development of employees (including promotion, transfers, assignments and beliefs). Augnito will not tolerate any act of discrimination in the workplace including but not limited to: Gender, Gender identity, National or ethnic origins, Marital or Domestic Partnership status, Pregnancy Status, Carer's responsibilities, Sexual orientation, Race, Color, Religious belief, Disability, Age,Any other grounds of discrimination

In order to provide equal employment and advancement opportunities to all individuals, employment decisions at Augnito will be based on merit, qualifications, and abilities. Our objective is to attract job applications and applications for development from the best possible candidates and to retain the best people.

In accordance with Augnito's data retention policy, candidate details are retained in our database for a period of five years. This allows us to reach out to candidates in the future for any relevant opportunities within the organization.

Contribute to the implementation, maintenance, and continuous improvement of management systems and compliance initiatives related to ISO 27001, ISO 42001, and ISO 13485. Support the organization in achieving and maintaining compliance with applicable standards, regulatory requirements, and internal policies. Participate in audits, assessments, risk management activities, and remediation efforts to ensure ongoing compliance and operational effectiveness.