Director of Compliance and Privacy

Job Summary

To support a growing virtual medical practice, the full-time salaried Director of Compliance and Privacy will manage daily operations of compliance programs, oversee privacy investigations, and ensure adherence to regulatory requirements while working remotely from anywhere in the continental US.

Key responsibilities

• Directly lead and execute the day-to-day operations of the HIPAA privacy program, including managing complex breach and privacy incident investigations
• Oversee the state privacy law program (CCPA/CPRA) and ensure efficient execution of data subject access requests and consent management workflows
• Manage operational volume and provide daily guidance to the compliance team, serving as the primary escalation point for complex compliance questions

Required qualifications

• 7+ years of experience in healthcare compliance or privacy within a clinical or medical group environment
• Deep expertise in HIPAA and HITECH, with strong knowledge of state privacy laws like CCPA/CPRA
• Proven track record as an investigator managing complex healthcare compliance and privacy intakes
• Experience operationalizing compliance rules and creating practical workflows
• A certification in healthcare compliance (CHC) or privacy (CHPC/CIPP) is strongly preferred