Head of Compliance – HIPAA and Security
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Head of Compliance (HIPAA) leading strategic legal support and data governance for Bask Health. Overseeing compliance frameworks, training, and regulatory adherence in a remote setup.
Responsibilities:
- Reporting to the General Counsel this position provides strategic and operational legal support across legal issues in cybersecurity, data privacy, artificial intelligence, and data governance.
- Develop, implement, and maintain the organization's comprehensive data governance and security, privacy and compliance frameworks and policies.
- Serve as the Privacy Officer and primary legal and operational authority on HIPAA, including Privacy Rule and Security Rule requirements.
- Ensure adherence to global, federal, state and emerging privacy laws (GDPR, CPRA, etc.), as applicable.
- Advise executive leadership on cybersecurity risk, mitigation, data governance, and regulatory obligations.
- Lead internal audits, risk assessments, and incident response planning.
- Manage relationships with outside counsel, regulators, and third-party vendors on compliance matters.
- Educate staff on data handling, privacy practices, and security threats. Organize and oversee employee training programs on data privacy, security protocols, and HIPAA obligations.
- Monitor evolving federal and state data privacy legislation and assess organizational impact.
- Draft and enforce internal data security policies, procedures, and Business Associate Agreements (BAAs).
- Represent the organization in regulatory investigations or breach notification proceedings, remediation efforts, and regulatory notifications.
Requirements:
- J.D. from an accredited law school and active bar membership required in NY
- 4 to 6 years of experience in health law, data privacy, or cybersecurity law
- Deep expertise in HIPAA/HITECH, state privacy laws, and corporate data security standards
- Experience advising on or litigating data breach, privacy, or regulatory enforcement matters
- Familiarity with NIST, SOC 2, ISO 27001, or similar security frameworks
- Strong understanding of emerging technologies, cloud infrastructure, AI, and their legal implications
- Bonus Qualifications
- IAPP Certified Information Privacy Professional designation (CIPP) or similar
- Certified HIPAA Professional (CHP) or equivalent
Similar Jobs
IT Sales Manager – Modern Infrastructure, Cyber Security, Managed Services
IT Sales Manager responsible for driving B2B sales in Modern Infrastructure, Cyber Security, and Managed Services. Collaborating with consulting teams and establishing new markets in Germany.
Security Engineer
Security Engineer protecting Serve’s delivery platform and infrastructure while collaborating with IT and engineering teams. Ensuring security best practices across cloud infrastructure and applications.
Member of Technical Staff – Security
First dedicated security hire responsible for building security practices at AI infrastructure company. Defining company-wide security strategy and collaborating with engineering and research teams.
Cybersecurity Engineer
Cybersecurity Engineer responsible for maintaining security in compliance-driven environments for Teal. Protecting clients through security monitoring, vulnerability management, and incident response.
Cybersecurity Lead
Lead Cybersecurity Strategy at Intersect, safeguarding critical systems in a cloud-first environment. Collaborate cross-functionally to integrate security practices for innovative energy solutions.
Principal, Multicloud Data Center Solutions – AI, Data Security & Resilience
Lead development of solutions for enterprise Multicloud/Data Center, AI & Data and Security & Resilience at Dell Technologies. Engage with customers and drive transformative technology solutions.
Lead Security Officer – Rotational
Lead Security Officer ensuring health, safety and security for clients in remote settings. Providing oversight, training, and recommendations based on security operations.
Security Officer, Seasonal
Remote Security Officer monitoring and patrolling assigned areas for safety and security. Working in remote settings where health, safety, and security is a priority.
Platform Engineer, Security
Platform & Security Engineer responsible for IT infrastructure and security at Cosuno. Leading compliance and operational excellence in a remote role.
Security and Threat Operations Engineer
Security and Threat Operations Engineer protecting the fintech environment at OnePay. Collaborating with teams to proactively identify and respond to security threats.
Security Implementation Engineer
Security Implementation Engineer responsible for deploying, configuring, and implementing cybersecurity solutions. Focused on security infrastructure projects across customer environments in Logically's client base.
Senior Manager – Data Protection, Information Security Program
Senior Manager in Data Protection implementing controls and driving initiatives at leading MENA financial institution. Ensuring compliance and enhancing data protection controls across the organization.
Cybersecurity Associate Internship
Cybersecurity Associate Internship helping secure government and intelligence projects for GDIT's Summer Internship Program. Collaborating with professionals and enhancing skills in a supportive environment.
Principal Security Engineer
Principal Security Engineer at Aspirion focusing on Cloud Security architecture and execution. Driving secure solutions for clients in revenue cycle services while leading technical initiatives.
Member of Technical Staff – Security
Security Engineer building and improving AI security scanning and detection products to protect enterprise AI. Collaborating with senior engineers and shaping secure AI adoption.
Information Security Engineer III
Information Security Engineer ensuring secure software function at global commerce platform. Collaborating with teams to secure applications and infrastructure with regulatory compliance.
Senior Manager, Security Delivery
Senior Manager leading security operations team; managing vulnerability analysis and engineering tasks for client accounts. Enhancing security service delivery and operational excellence.
Sales Specialist – Data & AI Security
Sales Specialist driving growth for Securiti AI solutions at Veeam Software. Focusing on territory planning and cross-selling into existing accounts.
Director, Physical Security, Safety
Director of Physical Security leading safety and investigative operations for D-Wave. Ensuring protection of people, facilities, and research environments while managing complex investigations.
Security Manager
Security Manager overseeing the tactical operations of security at XTIUM. Managing incident response and security workflows in a fast-paced environment.