Privacy & Compliance Specialist

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 13 hours agoStatus: Live

Job Summary

Own end-to-end privacy and compliance for member health data, building and running privacy programs including data mapping, privacy notices, consent flows, and data subject/patient rights. Establish compliant data collection and processing across EMRs, health information exchanges, wearables, and an AI digital twin. Lead privacy impact assessments, audit readiness (HIPAA Security Rule, SOC 2), vendor diligence, incident response workflows, and regulatory translation into practical requirements.

Location: San Francisco

Workplace: Onsite

Employment Type: Full time

Job Function: Legal, Risk & Compliance

Seniority: Mid level

Key Responsibilities

•Build and run the privacy program end-to-end, including data mapping/inventory, privacy notices, consent flows, and data subject/patient rights requests.
•Define and document how member health data is collected, stored, processed, and used across EMRs, health information exchanges, genetic reports, wearables, and the AI-powered digital twin.
•Perform privacy impact assessments and privacy-by-design reviews for new products, features, and services.
•Manage vendor privacy diligence and agreements (including data processing agreements and Business Associate Agreements) and maintain records of processing and data flows.
•Own compliance frameworks and audit readiness (e.g., HIPAA Security Rule, SOC 2), including security/privacy training, risk register, incident/breach workflows, and regulatory tracking.

Key Requirements

•5+ years in privacy and/or compliance with hands-on experience running a privacy program, ideally in healthcare or another highly regulated industry.
•Working fluency with HIPAA and modern privacy laws (state health privacy laws, CCPA/CPRA, FTC health data rules), plus familiarity with SOC 2.
•Ability to research and understand new regulatory requirements.
•Independent operator who builds scalable privacy/compliance frameworks and flags risks early.
•Strong judgment and communication skills to translate complex concepts into clear, actionable guidance for non-specialists.

Experience:HealthcarePrivacy complianceHighly regulatedData-intensive

Skills:CommunicationJudgmentCross-functional collaborationOwnership mindset

Certifications:CIPP/USCIPMCIPP/ECHPC

Company Brief

Superpower

Provides productivity enhancements for large language model workflows, including a browser extension and tools that add conversation management, templates, advanced prompts, and UI improvements for ChatGPT and other AI interfaces.

Industry: Developer Tools

Website

Loading job details...

Preparing the role view and application actions.

Superpower

1 week ago

Privacy & Compliance Specialist

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 13 hours agoStatus: Live

Job Summary

Location: San Francisco

Workplace: Onsite

Employment Type: Full time

Job Function: Legal, Risk & Compliance

Seniority: Mid level

Key Responsibilities

•Build and run the privacy program end-to-end, including data mapping/inventory, privacy notices, consent flows, and data subject/patient rights requests.
•Define and document how member health data is collected, stored, processed, and used across EMRs, health information exchanges, genetic reports, wearables, and the AI-powered digital twin.
•Perform privacy impact assessments and privacy-by-design reviews for new products, features, and services.
•Manage vendor privacy diligence and agreements (including data processing agreements and Business Associate Agreements) and maintain records of processing and data flows.
•Own compliance frameworks and audit readiness (e.g., HIPAA Security Rule, SOC 2), including security/privacy training, risk register, incident/breach workflows, and regulatory tracking.

Key Requirements

•5+ years in privacy and/or compliance with hands-on experience running a privacy program, ideally in healthcare or another highly regulated industry.
•Working fluency with HIPAA and modern privacy laws (state health privacy laws, CCPA/CPRA, FTC health data rules), plus familiarity with SOC 2.
•Ability to research and understand new regulatory requirements.
•Independent operator who builds scalable privacy/compliance frameworks and flags risks early.
•Strong judgment and communication skills to translate complex concepts into clear, actionable guidance for non-specialists.

Experience:HealthcarePrivacy complianceHighly regulatedData-intensive

Skills:CommunicationJudgmentCross-functional collaborationOwnership mindset

Certifications:CIPP/USCIPMCIPP/ECHPC

Company Brief

Superpower

Industry: Developer Tools

Website