Director of Legal

Biograph; New York (NY); On-site; USD 180,000 - 260,000; Full time

Job summary

Biograph is seeking an experienced Lead Counsel to head legal, oversee regulatory compliance across the organization, and scale a healthcare compliance program.

You will partner with executive leadership, clinical operations, and product teams to mitigate regulatory risk, draft and negotiate critical contracts, and manage outside counsel. A JD with active U.S. bar and 7+ years in healthcare law is required.

Qualifications

• JD from an accredited law school and active U.S. bar in good standing.
• 7+ years practicing law with healthcare compliance/regulatory experience.
• Deep knowledge of HIPAA/HITECH, Anti-Kickback, Stark, CPOM, and licensing rules.
• Broad capability across contracts, governance, IP, and employment risk management.
• Translate complex regulations into actionable business solutions for leadership.
• Experience managing external counsel and advisory budgets.

Responsibilities

• Lead the legal function and oversee regulatory compliance across Biograph.
• Build, manage, and scale the healthcare compliance program.
• Draft, negotiate, and review commercial contracts, vendor agreements, and licenses.
• Serve as SME on regulations, accreditations, and licensure for clinics and labs.
• Manage credentialing, state licensing, and scope-of-practice protocols.
• Partner with executives on regulatory risks, market expansion, and initiatives.
• Manage outside counsel and regulatory agencies.
• Establish HIPAA, SOC 2 Type II, and enterprise risk management frameworks.
• Develop privacy and security policies, breach protocols, and data safeguards with IT.
• Develop and maintain compliance training, audits, and risk assessments across locations.
• Monitor evolving healthcare regulations and digital health laws.
• Support governance, employment matters, investigations, and enterprise risk.

Skills

Regulatory Compliance

Cross-Functional Leadership

Contract Drafting

Policy Development

Regulatory Reporting

Healthcare Law

Risk Management

Legal Operations

Project Management

Communication Skills

Education

Juris Doctor (JD) degree

Active Bar Admission in the United States

Tools

Legal Management Software

Compliance Training Programs

Risk Assessment Frameworks

Breach Notification Protocols

Job description

• Lead the legal function and oversee regulatory compliance across Biograph


• Build, manage, and scale the healthcare compliance program


• Ensure adherence to HIPAA, Stark Law, Anti-Kickback Statute, CPOM regulations, and applicable federal and state healthcare laws


• Draft, negotiate, and review commercial contracts, clinical vendor agreements, partnership leases, software licenses, and vendor relationships


• Serve as subject matter expert on regulations, accreditations, and licensure governing clinic-based imaging, labs, and point-of-care diagnostic testing


• Manage credentialing, state licensing, and scope-of-practice protocols for Biograph providers


• Partner with executive leadership, clinical operations, and product teams on regulatory risks, market expansion, and strategic initiatives


• Manage outside legal counsel and specialized regulatory agencies


• Establish and monitor HIPAA, SOC 2 Type II, and enterprise-wide risk management frameworks


• Develop privacy and security policies, breach notification protocols, and patient data safeguards with IT and security teams


• Develop and maintain compliance training, internal audit procedures, and risk assessments across clinic locations


• Monitor evolving healthcare regulations, digital health laws, and state medical board rules


• Support corporate governance, employment matters, internal investigations, and organization-wide risk management

Requirements

• Juris Doctor (JD) degree from an accredited law school


• Active bar admission in good standing in at least one U.S. jurisdiction


• 7+ years of practicing law, with significant experience in healthcare compliance, regulatory affairs, or healthcare transaction law


• Deep working knowledge of HIPAA/HITECH, Anti-Kickback Statute, Stark Law, CPOM, and state medical licensing requirements


• Broad generalist legal capability across contract drafting, corporate governance, intellectual property, and employment risk management


• Ability to translate complex regulatory requirements into actionable, business-oriented solutions for executive leadership


• Ability to manage complex projects independently and drive cross-functional alignment in a high-growth setting


• Experience managing external counsel, specialized legal vendors, and outside advisory budgets


• Attention to detail, ethical judgment, and commitment to legal compliance


• Legally authorized to work in the United States


• Exceptional: 9+ years of relevant healthcare legal experience, combining law firm and in-house experience at a high-growth healthcare startup or digital health company


• Exceptional: Proven track record of building healthcare compliance programs and legal operations from the ground up in a clinical or health-tech environment

Core Competencies

Demonstrates expertise in healthcare compliance, regulatory affairs, and legal operations, with a strong focus on HIPAA, Stark Law, and Anti-Kickback Statute. Proven ability to develop and manage compliance programs and translate complex regulations into actionable solutions for executive leadership.

Highest-signal resume keywords

• Healthcare Compliance Program Development


• HIPAA/HITECH Knowledge


• Contract Drafting and Negotiation


• Regulatory Affairs Management


• Juris Doctor (JD) Degree

Hard Skills

• Healthcare Compliance


• Regulatory Compliance


• Contract Drafting


• Legal Research


• Risk Management


• Project Management


• Corporate Governance


• Licensure Management


• Internal Auditing


• Legal Operations

Soft Skills

• Attention to Detail


• Ethical Judgment


• Cross-Functional Collaboration


• Communication Skills


• Problem-Solving

Certifications & Qualifications

• Active Bar Admission

Industry Keywords

• HIPAA


• Stark Law


• Anti-Kickback Statute


• CPOM Regulations


• Healthcare Law


• Digital Health


• Clinical Operations


• Point-of-Care Testing


• State Medical Licensing


• Healthcare Startup

Tools & Technologies

• Compliance Training Programs


• Risk Assessment Frameworks


• Breach Notification Protocols


• Patient Data Safeguards


• Legal Management Software