Compliance Lead

Fullscript; Riverside (CA); On-site; USD 150,000 - 210,000; Full time

Job summary

Fullscript is seeking a Compliance Lead to shape privacy governance for a health-technology platform serving North America. You will work across product, engineering, security, data, clinical, and customer support toembed privacy by design, manage vendor reviews, PIAs, and ensure compliance with HIPAA and related laws.

This role emphasizes practical guidance and cross-functional collaboration. You will translate complex privacy requirements into clear business guidance, drive incidents response,

Qualifications

• : 7+ years of dedicated privacy experience in cross-functional roles.
• : Direct experience in US healthcare privacy (HIPAA).
• : Experience embedding privacy guardrails into products/features.
• : Experience with OneTrust platform and privacy operations.

Responsibilities

• Lead privacy governance for new features and AI-related initiatives.
• Manage privacy operations, vendor reviews, PIAs, and data mapping.
• Translate privacy laws (HIPAA, CPRA, PIPEDA) into practical playbooks and training materials.
• Coordinate with product, engineering, security, data and support teams.

Skills

Privacy governance

Cross-functional collaboration

HIPAA experience

OneTrust

US healthcare privacy

AI privacy implications

Stakeholder communication

Autonomy

Tools

OneTrust

Job description

About Fullscript

We’re an industry-leading health technology company on a mission to help people get better. We started in 2011 with one simple idea. Make it easier for practitioners to access the products they trust so they can deliver better care.

That simple idea grew into a platform that powers every part of care. Today, more than 125,000 practitioners use Fullscript for clinical insights, lab interpretations, patient analytics, education, and access to high-quality supplements. Over 10 million patients rely on Fullscript to stay connected to their care plans and follow through on treatment.

We build tools that make care smarter and more human. Tools that save time, simplify decisions, and help practitioners stay closely connected to the people they care for. When everything they need is in one place, they can focus on what matters most: helping people get better.

This is your invitation

Bring your ideas, your grit, and your care for people.

Join us and shape the future of care.

Privacy, trust, and responsible innovation sit at the center of everything we build. As our Compliance Lead, you'll help shape how privacy and data governance scale across a rapidly growing health technology platform serving licensed practitioners and their patients across North America.

You’ll work at the intersection of healthcare, AI, product development, and regulatory compliance, partnering closely with Product, Engineering, Security, Data, Clinical, and Customer Support teams. This role is ideal for someone who enjoys translating complex regulations into practical business decisions, influencing cross-functional stakeholders, and enabling innovation while protecting patient trust.

What You'll Do

Product Governance and Growth Support

• Partner with Product and Engineering on new features, architecture, and user flows to ensure privacy-by-design is integrated before launch, not retrofitted after.
• Lead privacy review of AI features and AI vendors, including model training restrictions, PHI usage controls, transparency disclosures, and pre-launch governance checkpoints.
• Support clinical research, outcomes tracking, and de-identification workflows so that secondary uses of data are governed under documented standards.
• Triage and respond to fast-moving product and commercial requests with calibrated, written guidance.

Privacy Operations and System Support

• Own day-to-day execution of core privacy operations alongside the Senior Director of Compliance, with the ability to operate independently on assigned workstreams.
• Operate Fullscript’s OneTrust environment for vendor reviews, data mapping, PIAs, consumer rights requests, and reporting, including configuration of new workflows as the program scales.
• Lead privacy incident response activities, including intake, triage, coordination with cross-functional stakeholders, documentation, and tracking remediation efforts through resolution.

Business Enablement and Compliance Monitoring

• Build trusted working relationships with stakeholders across the business so that privacy is engaged early on new initiatives rather than at the end.
• Translate HIPAA, PIPEDA, Quebec Law 25, CPRA, and other applicable US state privacy laws into plain-language guidance, playbooks, and training materials the business can use without further interpretation.
• Maintain ongoing monitoring of Fullscript’s privacy posture, surface emerging risk areas to the Senior Director of Compliance.

What You Bring

• 7+ years of dedicated, hands-on privacy experience, specifically in roles requiring deep cross-collaboration.
• Proven track record of working closely with Product and Engineering teams to embed data protection and privacy guardrails directly into features, technical solutions, and product designs.
• Must have direct experience working within the US healthcare industry (HIPAA).
• Proven, direct experience working within OneTrust.
• Deep understanding of US and Canadian privacy landscapes, with the ability to confidently navigate and apply requirements.
• Experience and strong foundational knowledge regarding the privacy implications of AI.
• Exceptional ability to build relationships across a business and communicate compliance requirements clearly and simply.
• A pragmatic, solution-oriented Individual Contributor who thrives on autonomy and fast business growth.

Why Fullscript

Great work happens when people feel supported, trusted, and inspired. At Fullscript, we stay curious and keep finding smarter ways to make care better. We grow together, take on new challenges, and focus on impact. We put people first, work as a team, and leave egos at the door.

We’re grateful for the interest in joining Fullscript.

Due to the high volume of applications, we’re not able to respond to phone or email inquiries about application status. If there’s a match, our team will reach out directly.

Fullscript is an equal opportunity employer committed to creating an inclusive workplace. Accommodations are available upon request at [e-mail].

All offers are contingent on successful background checks conducted in compliance with federal, state, and provincial laws.

We use AI tools to support parts of the hiring process, including screening and reviewing responses. Final hiring decisions are always made by people and follow all applicable privacy and employment laws in Canada and the U.S.

Learn More

www.fullscript.com

@fullscriptHQ on instagram

Let’s make healthcare whole

Fullscript shares salary ranges to support transparency and help candidates make informed decisions. The range shown reflects base salary only and does not include stock options, wellness stipends, or other benefits that are part of Fullscript’s total rewards package.