Privacy Manager

Headway
United States
Workplace: RemoteFull timeUSD 121,600 - 190,000 annuallyFunction: Communications, PR & CommunityExperience: 4-7 yearsSkills: ["Communication","Judgment","Cross-functional influence","Documentation","Collaboration"]

Own and strengthen Headway’s privacy program across HIPAA, 42 CFR Part 2, state privacy laws, behavioral health confidentiality, individual rights, vendor governance, and responsible AI use. Run daily privacy operations including privacy requests and incidents, workflows for HIPAA/state rights, investigations, and statutory deadlines. Conduct privacy assessments for products and vendors handling PHI, and translate complex requirements into practical guidance for cross-functional teams.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Headway
Headway
5 days ago

Privacy Manager

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 5 hours agoStatus: Live

Job Summary

Own and strengthen Headway’s privacy program across HIPAA, 42 CFR Part 2, state privacy laws, behavioral health confidentiality, individual rights, vendor governance, and responsible AI use. Run daily privacy operations including privacy requests and incidents, workflows for HIPAA/state rights, investigations, and statutory deadlines. Conduct privacy assessments for products and vendors handling PHI, and translate complex requirements into practical guidance for cross-functional teams.
Location: United States
Workplace: Remote
Employment Type: Full time
Job Function: Communications, PR & Community

Key Responsibilities

  • •Operate and improve the privacy program by maintaining policies, procedures, and controls aligned to HIPAA, 42 CFR Part 2, state privacy laws, and other applicable requirements.
  • •Keep privacy controls, data maps, and records current with clear owners, evidence, and testing schedules; track privacy risks and operational metrics.
  • •Manage privacy requests and incidents, including triage of inquiries/rights requests, execution of HIPAA/state rights workflows, and support for incident investigations with corrective actions.
  • •Conduct privacy assessments for products, vendors, and workflows involving PHI or sensitive personal information; partner on AI use case evaluations for minimum necessary access, retention, transparency, and human oversight.
  • •Translate regulatory, payer, and contractual requirements into practical guidance; develop privacy training and resources to help employees make sound decisions.

Pay and Benefits

Salary: USD 121,600 - 190,000 annually

Key Requirements

  • •4–7 years of U.S. privacy experience in a regulated industry (healthcare/health tech/health plans/financial services), with direct HIPAA experience strongly preferred.
  • •Hands-on experience in at least two areas such as privacy incidents, individual rights/DSAR workflows, privacy assessments, vendor/BAA governance, or privacy training.
  • •Ability to translate complex legal and regulatory requirements into clear, actionable guidance for non-experts.
  • •Strong judgment on which privacy decisions you can own and which require escalation.
  • •Excellent written and verbal communication skills, including documenting decisions clearly and influencing cross-functional partners.
Experience:4-7 yearsHealthcareHealth technologyHealth plansFinancial services
Skills:CommunicationJudgmentCross-functional influenceDocumentationCollaboration
Certifications:CIPP/USCIPMCIPTCHPCCHPSAI governance credential
Tech Stack:HIPAA42 CFR Part 2DSARAIMachine learningPHI

Company Brief

Headway
Headway is a technology-driven mental health platform that connects patients with licensed therapists and streamlines insurance-based mental healthcare access for providers and practices across the United States.
Industry: Mental Health
Company Size: Large (251 to 1,000 employees)
Growth: Scaleup
Headquarters: New York, United States
Founded: 2017
Website