Head of Health Tech Compliance & Risk

SimplePractice, LLC; United States; On-site; USD 215,000 - 268,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

401(k) plan

Flexible Time Off

Job summary

SimplePractice LLC in the United States is seeking a Senior Director of Compliance to own our regulatory program end to end. You will set strategy, partner with CISO and Product/Engineering, and lead a team of managers and analysts executing day-to-day compliance work.

The role requires extensive healthcare regulatory experience, HIPAA expertise, and a track record building and leading compliance teams within SaaS or health-tech.

Qualifications

• 15+ years of experience in healthcare regulatory compliance, risk, or GRC, including at least 7 years leading a compliance program or function.
• Experience on both sides of the table - inside a covered entity and inside health-tech/SaaS vendor
• Deep working knowledge of HIPAA and health-data privacy laws, and 42 CFR Part 2.
• Led an organization through a real regulatory event (OCR, state AG inquiry, breach remediation).
• Experience shipping compliance into a live product roadmap in an agile/SaaS environment.
• Track record building and managing a compliance team and budget.
• CHC certification or willingness to obtain within the first year.
• Executive presence: presenting risk to CEO/CLO.

Responsibilities

• Define and govern the compliance program, roadmap, priorities, and risk appetite.
• Chair cross-functional Compliance/Privacy/Security steering group with Legal, Security, and Product.
• Translate HIPAA/state/privacy laws into internal policy, controls, and product specs.
• Own the compliance policy library, approvals, reviews, and mapping to controls.
• In product planning, surface risk and ensure regulatory readiness before launches.
• Own vendor risk program, set risk-tiering and BAAs, review high-risk vendors.
• Lead audits, regulatory examinations, and coordinate with Legal.

Skills

Healthcare compliance

Regulatory leadership

HIPAA knowledge

Regulatory events

Regulatory roadmap

Team leadership

CHC certification

Executive presence

CHPC/CIPP

Security frameworks

Mental health compliance

Health-law background

ONC Certification

Job description

SimplePractice LLC in the United States is seeking a Senior Director of Compliance to own our regulatory program end to end. You will set strategy, partner with CISO and Product/Engineering, and lead a team of managers and analysts executing day-to-day compliance work.

The role requires extensive healthcare regulatory experience, HIPAA expertise, and a track record building and leading compliance teams within SaaS or health-tech.