Compliance Lead (HealthTech)

TL;DR

Compliance Lead (HealthTech): Managing privacy and data governance for a health technology platform with an accent on HIPAA, PIPEDA, and AI integration. Focus on embedding privacy-by-design into product features and overseeing privacy operations via OneTrust.

Location: USA Remote

Company

A health technology platform serving licensed practitioners and their patients across North America.

What you will do

• Partner with Product and Engineering to integrate privacy-by-design into new features and architecture before launch.
• Lead privacy reviews for AI features and vendors, focusing on PHI usage controls and model training restrictions.
• Manage day-to-day privacy operations and the OneTrust environment, including data mapping and PIAs.
• Lead privacy incident response activities, from intake and triage to remediation tracking.
• Translate HIPAA, PIPEDA, CPRA, and Quebec Law 25 into plain-language guidance and playbooks for the business.
• Maintain ongoing monitoring of the company's privacy posture and surface emerging risk areas.

Requirements

• 7+ years of dedicated, hands-on privacy experience.
• Direct experience working within the US healthcare industry (HIPAA).
• Proven, direct experience working within OneTrust.
• Deep understanding of US and Canadian privacy landscapes.
• Strong foundational knowledge regarding the privacy implications of AI.
• Ability to communicate complex compliance requirements clearly to cross-functional stakeholders.