Privacy & Compliance Specialist (Healthcare)

Location: In-person and on-site in San Francisco, United States. Relocation to the United States is supported for eligible candidates, and visa sponsorship is offered.

Company

hirify.global is a healthcare startup building a health system focused on longevity, preventive care, lab testing, data aggregation, digital twins, AI-powered healthcare, and peptides.

What you will do

• Build and operate the privacy program, including data inventories, privacy notices, consent flows, and member or patient rights requests.
• Define how health data is collected, stored, processed, and used across EMRs, health information exchanges, genetic reports, wearables, and the AI-powered digital twin.
• Conduct privacy impact assessments and privacy-by-design reviews for products, features, and services such as prescription peptides.
• Manage vendor privacy diligence, data processing agreements, Business Associate Agreements, records of processing, and data flows.
• Own compliance frameworks and audit readiness, including HIPAA Security Rule and SOC 2 policies, controls, evidence, and remediation.
• Lead privacy and security training, risk management, incident response, breach assessment, and regulatory implementation across the business.

Requirements

• 5+ years of experience in privacy and/or compliance, ideally in healthcare or another highly regulated, data-intensive industry.
• Hands-on experience running a privacy program and working with HIPAA, state health privacy laws, CCPA/CPRA, and FTC health data rules.
• Ability to research regulatory requirements and translate them into clear, actionable guidance for non-specialists.
• Strong judgment, independent ownership, and the ability to build scalable 0-to-1 frameworks in an ambiguous, fast-moving environment.
• Excellent communication and cross-functional collaboration skills with Operations, Product, Engineering, Growth, and Clinical teams.
• Must work in person in San Francisco or be able to relocate to the United States.

Nice to have

• Familiarity with SOC 2.
• Privacy certification such as CIPP/US, CIPM, CIPP/E, or CHPC.
• Strong personal interest in longevity and preventive healthcare.

Culture & Benefits

• Full-time role with end-to-end ownership of the privacy and compliance function.
• Opportunity to build a modern privacy and compliance program from the ground up.
• Direct collaboration on a flat, high-velocity, mission-driven team.
• Health-focused company culture centered on preventive and longevity-oriented care.
• Visa sponsorship and relocation support to the United States for eligible candidates.