Privacy and Compliance Specialist

Virta Health
United States
Workplace: RemoteFull timeUSD 100,000 - 120,000 annuallyFunction: Legal, Risk & ComplianceExperience: 4-7 yearsSkills: ["Project management","Communication","Stakeholder management","Ownership","Proactive problem-solving"]

Own the day-to-day execution of privacy operations and strengthen Virta’s privacy posture as the company scales. Coordinate privacy impact assessments and data protection reviews for products, features, and vendor relationships, maintain RoPA and data maps, and operationalize HIPAA and state privacy requirements. Serve as the primary point of contact for privacy inquiries and manage DSARs and privacy incident response workflows while partnering across Legal, Engineering, Product, Security, and Commercial teams.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Virta Health
Virta Health
2 days ago

Privacy and Compliance Specialist

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 10 hours agoStatus: Live

Job Summary

Own the day-to-day execution of privacy operations and strengthen Virta’s privacy posture as the company scales. Coordinate privacy impact assessments and data protection reviews for products, features, and vendor relationships, maintain RoPA and data maps, and operationalize HIPAA and state privacy requirements. Serve as the primary point of contact for privacy inquiries and manage DSARs and privacy incident response workflows while partnering across Legal, Engineering, Product, Security, and Commercial teams.
Location: United States
Workplace: Remote
Employment Type: Full time
Job Function: Legal, Risk & Compliance
Seniority: Mid level

Key Responsibilities

  • •Manage and maintain Virta’s privacy compliance program (policies, procedures, documentation)
  • •Conduct and coordinate privacy impact assessments/data protection assessments for new products, features, and vendors
  • •Maintain records of processing activities (RoPA), data inventories, and data flow maps while operationalizing HIPAA and state privacy requirements
  • •Serve as primary point of contact for privacy and data-related inquiries; draft responses for privacy questionnaires, RFPs, and due diligence requests
  • •Drive privacy initiatives end-to-end, including DSAR support, privacy incident response workflows, and privacy training/metrics reporting

Pay and Benefits

Salary: USD 100,000 - 120,000 annually
Equity and Bonus:Equity

Key Requirements

  • •4 to 7 years of experience in privacy, compliance, data protection, or a related field
  • •Working knowledge of HIPAA and state consumer privacy laws (including CCPA/CPRA) and health data regulations
  • •Demonstrated project management skills managing multiple workstreams simultaneously
  • •Experience with privacy impact assessments and/or incident response and/or DSAR workflows
  • •Strong written and verbal communication skills translating complex privacy requirements into practical guidance
Experience:4-7 yearsHealth techHealthcarePrivacy compliance
Skills:Project managementCommunicationStakeholder managementOwnershipProactive problem-solving
Tech Stack:HIPAACCPA/CPRAPIADPIADSARRoPAData flow mapsPrivacy by DesignPIIOpenAIAWSGoogle Gemini

Company Brief

Virta Health
Provides a telemedicine-based treatment platform for reversing type 2 diabetes and improving metabolic health through continuous remote care, personalized nutrition, coaching, and medical management.
Industry: HealthTech
Company Size: Large (251 to 1,000 employees)
Growth: Scaleup
Headquarters: San Francisco, United States
Founded: 2014
WebsiteLinkedIn