Director, Privacy Counsel Remote, USA

Omada Health, Inc.; United States; Hybrid; USD 211,200 - 303,600; Full time

Benefits offered by this job

Equity grants

Employee stock purchase plan (ESPP)

Remote first

Generous parental leave

Health, dental, and vision insurance

Job summary

Omada Health, Inc. is seeking a Director, Privacy Counsel to lead and mature our enterprise-wide privacy program across a complex regulatory landscape.

This individual contributor role intersects healthcare regulatory law, consumer tech, and clinical operations, guiding policies, processes, and controls to stay compliant while enabling innovation. You will partner with Product, Engineering, Clinical, and Commercial teams to design compliant data flows, manage HIPAA privacy programs, and provide

Qualifications

• 8+ years of privacy law experience, including in-house healthcare/digital health or life sciences
• HIPAA Privacy, Security, and Breach Notification expertise
• Experience guiding privacy-by-design for digital products and marketing ecosystems
• Experience with privacy incident response and breach management
• Knowledge of state privacy laws and AI governance
• Familiarity with health data interoperability (HIEs) and TEFCA/Carequality

Responsibilities

• Manage HIPAA privacy program including policy/procedure development and breach response
• Embed privacy requirements into product development and engineering workflows
• Lead privacy risk assessment, data governance, and vendor due diligence
• Provide guidance on consumer privacy laws and AI privacy governance
• Advise on privacy in digital marketing, advertising ecosystems
• Support ERISA/self-funded health benefit privacy considerations
• Design and deliver privacy training and awareness programs

Skills

HIPAA privacy

Privacy by design

Data governance

AI governance

Privacy incident response

ERISA privacy

Health data interoperability

CIPP/US (certification)

Education

J.D. from an accredited law school

Job description

Omada Health is on a mission to bend the curve of chronic disease.

Job overview:

Omada Health is seeking a Director, Privacy Counsel to manage and mature our enterprise-wide privacy program across a complex and rapidly evolving regulatory landscape. This individual contributor role will operate at the intersection of healthcare regulatory law, consumer technology, and clinical operations, providing practical, business-oriented guidance that enables innovation while protecting our members’ data and trust. Reporting to the VP, Privacy and Healthcare Regulatory, you will serve as Omada’s primary operational privacy leader, partnering across Product, Engineering, Clinical, Commercial, and other key functions to design, implement, and continuously improve policies, processes, and controls that keep us compliant and ahead of emerging risks.

Your impact:

• Manage Omada’s HIPAA privacy program, including policy and procedure development, incident investigations, and breach determination and response, ensuring compliance with HIPAA Privacy, Security, and Breach Notification Rules.
• Drive privacy-by-design across digital products and services by embedding privacy requirements into product development, engineering workflows, clinical operations, and other business processes.
• Execute Omada’s privacy risk assessment program, including data governance, vendor due diligence, and privacy review for commercial deals with employers, health plans, and PBMs, ensuring our contractual and regulatory obligations are met.
• Provide expert guidance on consumer privacy compliance, including state consumer health data and general consumer privacy laws, digital advertising, and tracking technologies.
• Serve as a key advisor on AI and emerging technologies, including AI privacy guidance and governance considerations across Omada’s AI and machine-learning initiatives.
• Support interoperability and health information exchange participation (e.g., Carequality, CommonWell, TEFCA) by counseling on privacy and data use requirements and helping design compliant data flows.
• Partner with internal stakeholders on ERISA and self-funded health benefit plan privacy considerations.
• Support clinical research privacy compliance and IRB-adjacent work.
• Design and deliver privacy training, awareness, and culture-building initiatives that enable Omada teammates to understand and live our privacy obligations in their day-to-day roles.

Success in this role will be measured by the maturity of our privacy program, including the quality, timeliness, and effectiveness of policies, training, incident response, and privacy counseling, and feedback from leaders and partners across the business.

About you:

• You have a J.D. from an accredited law school and active bar admission.
• You bring 8+ years of privacy law experience, including meaningful in-house experience at a healthcare, digital health, or life sciences company and/or at a top-tier law firm counseling healthcare, digital health, and/or life sciences clients.
• You have deep substantive expertise in HIPAA Privacy, Security, and Breach Notification Rules and are fluent in the evolving landscape of state consumer privacy and consumer health data laws (e.g., WMHMDA, CCPA/CPRA) and AI governance.
• You have demonstrated experience managing end-to-end privacy incident response and breach notification processes, from triage and investigation through regulator and stakeholder notifications.
• You have a strong track record of advising on privacy-by-design for digital products, and in digital marketing and advertising ecosystems.
• You communicate complex regulatory concepts clearly and succinctly for non-legal audiences and are skilled at crafting guidance that is practical, actionable, and aligned with business goals.
• You are comfortable operating with substantial autonomy, exercising sound judgment in ambiguous regulatory environments with material legal and reputational stakes.
• You are highly organized, able to manage multiple complex projects simultaneously, and known for strong attention to detail.
• You bring a collegial, low-ego working style, enjoy cross-functional collaboration, and balance rigor with perspective and a sense of humor.
• Experience at a digital health, telehealth, or health technology company with direct patient or member engagement.
• Familiarity with AI and machine-learning privacy governance and emerging federal and state AI regulations.
• Experience with HIEs and health data interoperability frameworks such as Carequality, CommonWell, and TEFCA.
• Knowledge of ERISA and self-funded health benefit plan privacy considerations.
• Privacy certifications (e.g., CIPP/US, CIPM, CHPS).
• Experience supporting clinical research privacy compliance and IRB-adjacent studies relating to clinical evidence generation.
• Competitive salary with generous annual cash bonus
• Equity grants
• Employee stock purchasing plan (ESPP)
• Remote first work from home culture
• Flexible Time Off to help you rest, recharge, and connect with loved ones
• Generous parental leave
• Health, dental, and vision insurance (and above market employer contributions)
• 401k retirement savings plan
• Lifestyle Spending Account (LSA)
• Mental Health Support Solutions
• ...and more!

It takes a village to change health care. As we build together toward our mission, we strive to embody the following values in our day-to-day work. We hope these hold meaning for you as well as you consider Omada!

• Cultivate Trust. We listen closely and we operate with kindness. We provide respectful and candid feedback to each other.
• Seek Context. We ask to understand and we build connections. We do our research up front to move faster down the road.
• Act Boldly. We innovate daily to solve problems, improve processes, and find new opportunities for our members and customers.
• Deliver Results. We reward impact above output. We set a high bar, we’re not afraid to fail, and we take pride in our work.
• Succeed Together. We prioritize Omada’s progress above team or individual. We have fun as we get stuff done, and we celebrate together.
• Remember Why We’re Here. We push through the challenges of changing health care because we know the destination is worth it.

About Omada Health: Omada Health (Nasdaq: OMDA) is reverse engineering the way healthcare is delivered in America, putting the space between doctor visits–where health is won or lost–at the center of care. Today's healthcare system poorly serves chronic conditions that require ongoing support outside of the exam room, like obesity, diabetes, hypertension, cholesterol, and musculoskeletal conditions. Omada’s virtual-first model combines human-led care teams, connected devices, and AI-enabled technology to deliver personalized care at scale, including support for GLP-1 therapy. Omada has served more than two million members since launch across 2,000+ employers, health plans, pharmacy benefit managers, and health systems. Learn more at omadahealth.com.

Omada is thrilled to share that we’ve been certified as a Great Place to Work! Pleaseclick here for more information.

We carefully hire the best talent we can find, which means actively seeking diversity of beliefs, backgrounds, education, and ways of thinking. We strive to build an inclusive culture where differences are celebrated and leveraged to inform better design and business decisions. Omada is proud to be an equal opportunity workplace and affirmative action employer. We are committed to equal opportunity regardless of race, color, religion, sex, gender identity, national origin, ancestry, citizenship, age, physical or mental disability, legally protected medical condition, family care status, military or veteran status, marital status, domestic partner status, sexual orientation, or any other basis protected by local, state, or federal laws. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

Below is a summary of salary ranges, by geographic zone, for this role*. These ranges represent a good faith estimate of the minimum and maximum base salary for the position in that zone at the time of posting. Please refer to thisresource for detail on zone designations.

Zone 1: $242,880 - $303,600

Zone 2: $232,320 - $290,400

Zone 3: $211,200 - $264,000

Please note that zones may be updated as market data changes but we will honor the range applicable to your zone (which is determined by your location) as of your application date.

*The actual offer, including the compensation package, will be within the posted range for the relevant zone and will be determined based on multiple factors, such as the candidate's skills and experience, and other business considerations such as internal equity..

Pleaseclick here for more information on our Candidate Privacy Notice.

Create a Job Alert

Interested in building your career at Omada Health? Get future opportunities sent straight to your email.

Accepted file types: pdf, doc, docx, txt, rtf

Enter manually

Accepted file types: pdf, doc, docx, txt, rtf

LinkedIn Profile

Do you currently live in the United States? * Select...

We are unable to employ candidates residing outside of the US. Due to the nature of our work, data, specifically personal health information may not be accessed, disclosed or used outside of the U.S. Please note that the U.S. is limited to the 50 states of the United States.

Do you hold a J.D. from an accredited law school and active membership in good standing with at least one state bar? * Select...

Which of the below best describes your healthcare experience? * Select...

Which of the below best describes your legal experience? * Select...

Which of the below best describes your legal experience? * Select...

In your most recent HIPAA‑related role, which of the following did you personally lead on a regular basis? * Select...

What is the most advanced role you have played in privacy incident response and breach management? * Select...

Voluntary Self Identification

At Omada, we’re working every day to build a team where people from all backgrounds can thrive. To help us learn more about how we can increase diversity in our candidate pool, we invite you to provide demographic information in a confidential survey. Your responses will not be associated with your specific application and will not in any way be used in the hiring decision.

Select...

I identify as transgender: Select...

I identify my sexual orientation as: Select...

Which of the following best represents your racial or ethnic background: (Check more than one if that is how you identify) Select...

Select...

Do you identify as a person with a disability of any kind, visible or invisible? Select...