דרושים Compliance & Security Intern (HIPAA & SOC 2) בתל אביב

Compliance & Security Internship (HIPAA & SOC 2)

Type: Unpaid Internship (with potential for future paid opportunity)

Location: Remote / Hybrid

Company: Shemesh Therapy — a mental health technology startup

About Shemesh Therapy

Shemesh Therapy connects individuals and healthcare organizations with top South African therapists — making therapy affordable, culturally aligned, and accessible online.

Our platform powers secure therapy sessions, clinical data tracking, and enterprise-level employee mental health support. We are now preparing for HIPAA and SOC 2 compliance to meet the highest security and privacy standards in healthcare.

Role Overview

We’re seeking a Compliance & Security Intern who can help us take our existing system and make it fully HIPAA- and SOC 2-compliant.

You’ll work directly with our CTO and product team to audit our current infrastructure, identify gaps, and implement the necessary security and documentation processes.

This is an unpaid internship ideal for someone looking to gain hands-on experience in healthtech, security compliance, and startup operations while making a tangible impact on a growing company.

Responsibilities

• Review and document Shemesh Therapy’s existing technical architecture.
• Identify compliance gaps in data storage, encryption, and access control.
• Work with our technical team to implement HIPAA and SOC 2 controls.
• Create and maintain required compliance documentation and policies.
• Assist in designing and deploying secure data handling and monitoring systems.
• Help prepare for third-party audits or readiness assessments.
• Stay up to date on HIPAA, SOC 2, and GDPR regulatory frameworks.

Requirements

• Background or strong interest in cybersecurity, compliance, or cloud infrastructure.
• Basic familiarity with HIPAA and SOC 2 frameworks.
• Understanding of cloud systems (AWS, Google Cloud, or Azure) and data security principles.
• Strong communication and documentation skills.
• Self-starter — comfortable working in a fast-moving startup environment.
• (Bonus) Experience with compliance automation tools like Vanta, Drata, or Tugboat Logic.

What You’ll Gain

• Hands-on experience bringing a real-world healthtech platform into compliance.
• Mentorship from experienced engineers and founders.
• Exposure to healthcare privacy, cybersecurity, and startup tech operations.
• Opportunity for a future paid position or letter of recommendation based on performance.

How to Apply

Send a short message introducing yourself and your interest in healthcare compliance to:

|** לפנייה למשרה יש להגיש מועמדות **|