Privacy Manager: HIPAA, AI & Health Tech

Headway; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

Headway is seeking a Privacy Manager to lead privacy operations across HIPAA, state laws, and vendor governance. You will own risk assessments, rights workflows, and incident response, partnering with Legal, Security, and Product to protect patient data.

You will translate complex regulations into practical guidance for teams and develop privacy training and resources. This role emphasizes scalable processes and alignment with Headway’s mission to expand access to care.

Qualifications

• 4–7 years of U.S. privacy experience in regulated industries such as healthcare, health tech, health plans, or financial services.
• Direct HIPAA experience strongly preferred.
• Hands-on experience in at least two areas: privacy incidents, DSAR workflows, privacy assessments, vendor governance, or privacy training.
• Ability to translate complex legal/regulatory requirements into clear guidance for non-experts.
• Excellent written and verbal communication; ability to influence cross-functional partners.

Responsibilities

• Operate and improve the privacy program, including policies, controls, data maps, and processing records.
• Manage privacy requests, incidents, and rights workflows with evidence and timelines.
• Assess product, AI, and vendor risk; conduct privacy assessments for PHI or sensitive data.
• Collaborate with Legal, Security, Product, and Operations to strengthen privacy practices.

Skills

HIPAA knowledge

DSAR workflows

Vendor governance

Privacy training

AI governance

Privacy assessments

Incident management

PHI handling

Regulatory translation

Cross-functional collaboration

Job description

Headway is seeking a Privacy Manager to lead privacy operations across HIPAA, state laws, and vendor governance. You will own risk assessments, rights workflows, and incident response, partnering with Legal, Security, and Product to protect patient data.

You will translate complex regulations into practical guidance for teams and develop privacy training and resources. This role emphasizes scalable processes and alignment with Headway’s mission to expand access to care.