Compliance Lead

Fullscript; Boston (MA); On-site; USD 140,000 - 200,000; Full time

Job summary

Fullscript, a health technology leader, is seeking a Compliance Lead to scale privacy and data governance across a growing platform serving practitioners and patients in North America. You will partner with Product, Engineering, Security, Data, Clinical, and Customer Support to translate complex privacy requirements into practical guidance, enabling innovation while protecting patient trust.

This role focuses on governance, privacy operations, and business enablement to embed privacy by design

Qualifications

• 7+ years of hands-on privacy experience with cross-functional collaboration.
• Direct experience embedding privacy guardrails into features, solutions, and product designs.
• Experience in US healthcare privacy (HIPAA) compliance.
• Proficient with OneTrust for vendor reviews, data mapping, PIAs, and consumer rights requests.
• Deep understanding of US/Canada privacy landscapes and AI privacy implications.
• Strong stakeholder communication and relationship-building skills.
• Autonomy in a fast-growth environment.

Responsibilities

• Partner with Product and Engineering to bake privacy-by-design into new features and user flows.
• Lead privacy reviews of AI features and AI vendors, including governance checkpoints.
• Support clinical research, outcomes tracking, and de-identification workflows.
• Triage and respond to fast-moving product and commercial requests with calibrated guidance.
• Own day-to-day privacy operations alongside leadership, and operate OneTrust for workflows.
• Lead privacy incident response activities with cross-functional coordination and remediation tracking.
• Build trusted relationships across the business to engage privacy early in initiatives.
• Translate HIPAA, PIPEDA, Quebec Law 25, CPRA, and other US state privacy laws into plain-language guidance and training materials.

Skills

Privacy governance

Cross-functional collaboration

Regulatory interpretation

Excellent communication

Autonomous contributor

AI privacy implications

Relationship building

Tools

OneTrust

Job description

About Fullscript

We’re an industry-leading health technology company on a mission to help people get better. We started in 2011 with one simple idea. Make it easier for practitioners to access the products they trust so they can deliver better care.

That simple idea grew into a platform that powers every part of care. Today, more than 125,000 practitioners use Fullscript for clinical insights, lab interpretations, patient analytics, education, and access to high-quality supplements. Over 10 million patients rely on Fullscript to stay connected to their care plans and follow through on treatment.

We build tools that make care smarter and more human. Tools that save time, simplify decisions, and help practitioners stay closely connected to the people they care for. When everything they need is in one place, they can focus on what matters most: helping people get better.

This is your invitation

Bring your ideas, your grit, and your care for people.

Join us and shape the future of care.

Privacy, trust, and responsible innovation sit at the center of everything we build. As our Compliance Lead, you'll help shape how privacy and data governance scale across a rapidly growing health technology platform serving licensed practitioners and their patients across North America.

You’ll work at the intersection of healthcare, AI, product development, and regulatory compliance, partnering closely with Product, Engineering, Security, Data, Clinical, and Customer Support teams. This role is ideal for someone who enjoys translating complex regulations into practical business decisions, influencing cross-functional stakeholders, and enabling innovation while protecting patient trust.

Product Governance and Growth Support

• Partner with Product and Engineering on new features, architecture, and user flows to ensure privacy-by-design is integrated before launch, not retrofitted after.
• Lead privacy review of AI features and AI vendors, including model training restrictions, PHI usage controls, transparency disclosures, and pre-launch governance checkpoints.
• Support clinical research, outcomes tracking, and de-identification workflows so that secondary uses of data are governed under documented standards.
• Triage and respond to fast-moving product and commercial requests with calibrated, written guidance.

Privacy Operations and System Support

• Own day-to-day execution of core privacy operations alongside the Senior Director of Compliance, with the ability to operate independently on assigned workstreams.
• Operate Fullscript’s OneTrust environment for vendor reviews, data mapping, PIAs, consumer rights requests, and reporting, including configuration of new workflows as the program scales.
• Lead privacy incident response activities, including intake, triage, coordination with cross-functional stakeholders, documentation, and tracking remediation efforts through resolution.

Business Enablement and Compliance Monitoring

• Build trusted working relationships with stakeholders across the business so that privacy is engaged early on new initiatives rather than at the end.
• Translate HIPAA, PIPEDA, Quebec Law 25, CPRA, and other applicable US state privacy laws into plain-language guidance, playbooks, and training materials the business can use without further interpretation.
• Maintain ongoing monitoring of Fullscript’s privacy posture, surface emerging risk areas to the Senior Director of Compliance.

Requirements

• 7+ years of dedicated, hands-on privacy experience, specifically in roles requiring deep cross-collaboration.
• Proven track record of working closely with Product and Engineering teams to embed data protection and privacy guardrails directly into features, technical solutions, and product designs.
• Must have direct experience working within the US healthcare industry (HIPAA).
• Proven, direct experience working within OneTrust.
• Deep understanding of US and Canadian privacy landscapes, with the ability to confidently navigate and apply requirements.
• Experience and strong foundational knowledge regarding the privacy implications of AI.
• Exceptional ability to build relationships across a business and communicate compliance requirements clearly and simply.
• A pragmatic, solution-oriented Individual Contributor who thrives on autonomy and fast business growth.

Why Fullscript

Great work happens when people feel supported, trusted, and inspired. At Fullscript, we stay curious and keep finding smarter ways to make care better. We grow together, take on new challenges, and focus on impact. We put people first, work as a team, and leave egos at the door.

Fullscript is an equal opportunity employer committed to creating an inclusive workplace. Accommodations are available upon request at [e-mail].

All offers are contingent on successful background checks conducted in compliance with federal, state, and provincial laws.

We use AI tools to support parts of the hiring process, including screening and reviewing responses. Final hiring decisions are always made by people and follow all applicable privacy and employment laws in Canada and the U.S.

Learn More

www.fullscript.com

@fullscriptHQ on instagram

Let’s make healthcare whole