Global Data Privacy Specialist (Remote, HIPAA/GDPR)

DeepHealth; United States; Hybrid; USD 70,000 - 110,000; Full time

Job summary

DeepHealth seeks a Data Privacy Compliance Specialist to support its global privacy program, including HIPAA and GDPR. You will help ensure personal data is collected, stored, and processed in line with applicable laws and DeepHealth requirements.

You will collaborate across product, engineering and operations to implement Privacy by Design, DPAs, and data transfer assessments, while maintaining documentation for audits and regulatory readiness.

Qualifications

• Bachelor's degree in a relevant field or equivalent practical experience.
• Minimum of 2 years of experience in a regulated industry; medical device experience preferred.
• Strong knowledge of GDPR and HIPAA.
• Excellent written and oral communication skills.
• Experience supporting privacy assessments, DPAs, or Privacy by Design activities welcome.

Responsibilities

• Support privacy programs and help ensure compliance with applicable local, national, and global privacy laws.
• Assist with the Privacy by Design program supporting product development and modification, including software and AI use cases.
• Collaborate with Vendor Management on DPAs and Transfer Impact Assessments as applicable.
• Research and review country-specific privacy frameworks to support compliance and business opportunities.
• Collaborate cross-functionally to implement technical and organizational measures that support data privacy.
• Monitor how personal data is collected, processed, and stored for compliance.

Skills

GDPR knowledge

HIPAA knowledge

Communication skills

Regulated industry experience

Education

Bachelor's degree or equivalent

Job description

DeepHealth seeks a Data Privacy Compliance Specialist to support its global privacy program, including HIPAA and GDPR. You will help ensure personal data is collected, stored, and processed in line with applicable laws and DeepHealth requirements.

You will collaborate across product, engineering and operations to implement Privacy by Design, DPAs, and data transfer assessments, while maintaining documentation for audits and regulatory readiness.