For most people, health insurance is something that happens to them: a plan chosen by someone else, with little room to fit their life. Thatch is changing that. We help companies give every employee a real healthcare budget instead of a one-size-fits-all plan, so people can choose the coverage and care that works for them, and employers get predictable costs they can control.
It’s a simple idea, but making it real means solving hard problems across healthcare, payments, and technology, and we’re just getting started. We look for people who like solving complex problems, use good judgment, and are comfortable working through ambiguity. People here care deeply about our customers, take real responsibility for what gets built, and are driven by doing work that matters.
Thatch is rethinking how health insurance is provided and used in the US, and compliance is core to what we do. Our compliance obligations span insurance regulation, financial services, employee benefits, and IRS requirements–often at the same time. You'll be part of the team that keeps that program running: reviewing marketing and advertising against state insurance rules and federal advertising requirements, executing our monitoring and testing procedures and documenting the results, and working second-line review of customer accounts and transaction monitoring escalations. You'll do this alongside experienced compliance and legal colleagues and, regardless of your level, will learn so much as you help build this function out. We're looking for someone with a few years of compliance or regulatory experience who is precise, organized, and genuinely interested in why a rule exists, not just whether a box got checked.
We interview rigorously based on integrity, talent, and drive; the trust we display in our teammates from day 1 is a reflection of the confidence we have in this process. We aim to evaluate the things you’ll be doing every day as best we can, and we move quickly. Here's what to expect:
Support client CMMC and NIST compliance engagements by reviewing evidence and technical configurations, maintaining audit-readiness documentation, identifying gaps, and communicating clear remediation guidance.
Coordinate client security assessments, questionnaires, audits, and evidence from intake through delivery, partnering across teams to provide accurate responses, track remediation, protect sensitive information, and improve GRC processes.
Support Bloomreach’s Governance, Risk, and Compliance work by coordinating audits, investigating compliance issues, maintaining policies and documentation, and helping engineering and sales teams address customer security requirements.
Support Bloomreach’s Governance, Risk, and Compliance team by maintaining compliance activities, investigating issues, preparing audit materials, and helping engineering and sales teams address customer security requirements.
The Compliance Officer reviews KYC cases, assesses client risk, investigates screening and transaction-monitoring alerts, and improves compliance processes and technology, including through AI.
