Privacy & Compliance Specialist

Superpower
San Francisco
Workplace: OnsiteFull timeFunction: Legal, Risk & ComplianceSkills: ["Communication","Judgment","Cross-functional collaboration","Ownership mindset"]

Own end-to-end privacy and compliance for member health data, building and running privacy programs including data mapping, privacy notices, consent flows, and data subject/patient rights. Establish compliant data collection and processing across EMRs, health information exchanges, wearables, and an AI digital twin. Lead privacy impact assessments, audit readiness (HIPAA Security Rule, SOC 2), vendor diligence, incident response workflows, and regulatory translation into practical requirements.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Superpower
Superpower
2 months ago

Privacy & Compliance Specialist

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 6 hours agoStatus: Live

Job Summary

Own end-to-end privacy and compliance for member health data, building and running privacy programs including data mapping, privacy notices, consent flows, and data subject/patient rights. Establish compliant data collection and processing across EMRs, health information exchanges, wearables, and an AI digital twin. Lead privacy impact assessments, audit readiness (HIPAA Security Rule, SOC 2), vendor diligence, incident response workflows, and regulatory translation into practical requirements.
Location: San Francisco
Workplace: Onsite
Employment Type: Full time
Job Function: Legal, Risk & Compliance
Seniority: Mid level

Key Responsibilities

  • •Build and run the privacy program end-to-end, including data mapping/inventory, privacy notices, consent flows, and data subject/patient rights requests.
  • •Define and document how member health data is collected, stored, processed, and used across EMRs, health information exchanges, genetic reports, wearables, and the AI-powered digital twin.
  • •Perform privacy impact assessments and privacy-by-design reviews for new products, features, and services.
  • •Manage vendor privacy diligence and agreements (including data processing agreements and Business Associate Agreements) and maintain records of processing and data flows.
  • •Own compliance frameworks and audit readiness (e.g., HIPAA Security Rule, SOC 2), including security/privacy training, risk register, incident/breach workflows, and regulatory tracking.

Key Requirements

  • •5+ years in privacy and/or compliance with hands-on experience running a privacy program, ideally in healthcare or another highly regulated industry.
  • •Working fluency with HIPAA and modern privacy laws (state health privacy laws, CCPA/CPRA, FTC health data rules), plus familiarity with SOC 2.
  • •Ability to research and understand new regulatory requirements.
  • •Independent operator who builds scalable privacy/compliance frameworks and flags risks early.
  • •Strong judgment and communication skills to translate complex concepts into clear, actionable guidance for non-specialists.
Experience:HealthcarePrivacy complianceHighly regulatedData-intensive
Skills:CommunicationJudgmentCross-functional collaborationOwnership mindset
Certifications:CIPP/USCIPMCIPP/ECHPC

Company Brief

Superpower
Provides productivity enhancements for large language model workflows, including a browser extension and tools that add conversation management, templates, advanced prompts, and UI improvements for ChatGPT and other AI interfaces.
Industry: Developer Tools
Website