Senior Compliance Analyst

SimplePractice; Santa Monica (CA); On-site; USD 114,000 - 142,000; Full time

Benefits offered by this job

Medical insurance

401(k) with match

Flexible PTO

Mental health resources

Parental leave

Tuition reimbursement

ERGs

Job summary

SimplePractice is seeking a Senior Compliance Analyst to translate legal and regulatory requirements into practical controls, processes, and product guidance. The role partners across Product, Engineering, Legal, Security, Marketing, and Support to operationalize interpretations and elevate risk.

You will drive privacy and regulatory operations, data mapping, and de-identification initiatives, while coordinating audits and vendor reviews to ensure program success.

Qualifications

• 4 years of compliance experience required in healthcare technology or SaaS.
• Working knowledge of HIPAA, HITRUST, U.S. privacy law requirements, and product compliance practices.
• Experience partnering with Product, Engineering, Legal, Security, Marketing, or Customer Support teams.
• Ability to turn complex requirements into clear operational guidance.
• Strong judgment, writing, organization, and project-management skills.
• Bachelor's degree or equivalent practical experience.

Responsibilities

• Product Compliance: Serve as the Compliance partner for assigned product squads and initiatives.
• Review PRDs, features, and material product changes early in the development lifecycle.
• Translate requirements and recommendations from Legal into clear guidance for Product, Engineering, Design, and Operations.
• Assess compliance for AI-enabled features, accessibility, data use, and emerging technologies.
• Document material assessments, decisions, remediation items, and escalations.
• Privacy and Regulatory Operations: Support implementation of HIPAA and applicable privacy laws.
• Lead compliance projects across stakeholders and cross-functional teams.
• Monitor regulatory developments and operationalize resulting requirements.
• Support data mapping, retention, minimization, consent management, and de-identification initiatives.
• Assist with data subject rights requests and customer-facing privacy docs.
• Risk, Assurance, and Vendor Oversight: Conduct risk and compliance assessments and remediation tracking.
• Support HITRUST, PCI, ISO audits through evidence collection and testing.
• Conduct vendor and third-party compliance reviews.
• Maintain policies and operational guidance for programs.
• Business and Customer Support: Handle compliance-related inquiries and escalations with other teams.
• Participate in incident response and remediation actions.
• Develop internal privacy, AI, and compliance training.
• Help create customer trust content and internal guidance.
• Track workflow performance, SLAs, and program metrics; push for improvements.

Skills

Regulatory compliance

HIPAA

Privacy law

Cross-functional collaboration

Technical writing

Project management

Education

Bachelor's degree or equivalent

Job description

About Us

At SimplePractice, we are improving access to quality care by equipping health and wellness clinicians with all the tools they need to thrive in private practice.

More than 250,000 providers trust SimplePractice to build their business through our industry-leading software with powerful tools that simplify every part of practice management. From admin work to clinical care, our suite of innovative solutions work together to reduce administrative burden-empowering solo and small group practitioners to thrive alongside their clients.

Award-winning and people-first, SimplePractice is shaping the future of health tech. In 2026, we were recognized by BuiltIn as a Best Remote Company to Work For, Software Guru's Best Places to Code, Becker Healthcare Telehealth Companies to Know, and we won a MedTech Breakthrough Award for Best Practice Management Solution Provider.

The Role

The Senior Compliance Analyst helps translate legal and regulatory requirements into practical controls, processes, and product guidance. Legal determines the company's interpretation of regulatory scope and requirements; Compliance partners across the business to operationalize that interpretation, monitor execution, and elevate risk.

Responsibilities

Product Compliance

• Serve as the Compliance partner for assigned product squads and initiatives


• Review Product Requirement Documents (PRDs), features, and material product changes early in the development lifecycle


• Translate requirements and recommendations established with Legal into clear, actionable guidance for Product, Engineering, Design, and Operations


• Assess compliance considerations for AI-enabled features, accessibility, data use, and emerging technologies


• Document material assessments, decisions, remediation items, and escalations

Privacy and Regulatory Operations

• Support implementation of HIPAA and applicable federal, state, and international privacy law requirements


• Lead compliance projects and initiatives from intake through completion, coordinating and building alignment across multiple stakeholders and cross-functional teams


• Monitor regulatory developments, coordinate interpretation with Legal, and operationalize resulting requirements


• Support data mapping, retention, minimization, consent management, and de-identification initiatives


• Assist with data subject rights requests, privacy controls, and customer-facing privacy documentation

Risk, Assurance, and Vendor Oversight

• Conduct risk and compliance assessments and help teams implement remediation plans


• Support HITRUST, PCI, ISO, and other audit or certification activities through evidence collection, control testing, documentation, and remediation tracking


• Conduct compliance reviews of vendors and third parties, including data access, data use, integrations, and AI considerations


• Maintain policies, procedures, checklists, and operational guidance for assigned programs

Business and Customer Support

• Support compliance-related customer inquiries and escalations in coordination with Customer Support, Marketing, and Legal


• Participate in compliance incident response, including documentation, tracking, and corrective actions


• Develop practical internal privacy, AI, and compliance training


• Help develop internal guidance for teams and customer-facing trust content


• Track workflow performance, risks, SLAs, and program metrics; recommend process improvements and appropriate automation


• Perform other duties and support related Compliance and Risk initiatives as assigned

Desired Skills and Experience

• 4 years of prior compliance experience is required, preferably in healthcare technology or SaaS. Adjacent experience in privacy, risk, or a related field is valued but does not replace this compliance requirement


• Working knowledge of HIPAA, HITRUST, U.S. privacy law requirements, and product compliance practices


• Experience partnering with Product, Engineering, Legal, Security, Marketing, or Customer Support teams


• Ability to turn complex requirements into clear operational guidance


• Strong judgment, writing, organization, and project-management skills


• Bachelor's degree or equivalent practical experience

Bonus Points

• Experience with AI governance, accessibility, vendor risk, incident response, or healthcare-specific requirements such as 42 CFR Part 2 and ePrescribing


• Experience supporting HITRUST, PCI, ISO, or similar assurance programs


• IAPP, healthcare compliance, or comparable certification


• Experience leveraging AI, including large language models (LLMs) and other AI tools, to operationalize and scale compliance programs


• Familiarity with privacy, procurement, training, and workflow-management tools

Benefits

We offer a competitive benefits program including:

• Medical, dental, vision, life & disability insurance


• 401(k) plan with company match


• Flexible Time Off (FTO), wellbeing days, paid holidays, and summer Fridays


• Mental health resources


• Paid parental leave & Backup Care


• Tuition reimbursement


• Employee Resource Groups (ERGs)

California Job Applicant Privacy Notice

Thank you for your interest in opportunities at SimplePractice LLC (\"SimplePractice\" or \"us\" or \"we\" or \"our\"). Please note that when you submit your resume or application materials to us for employment purposes, you are subject to the SimplePractice California Job Applicant Privacy Notice.

For more information about our privacy practices, please contact us at .

Notice to Candidates

SimplePractice has been made aware of fraudulent job postings and unaffiliated third parties posing as our recruiting team. We do not have any affiliation or connection to these situations and only post open roles on our official Careers page (simplepractice.com/careers) and reputable job boards like our official LinkedIn or Indeed pages.

All official SimplePractice recruitment emails will be sent from the , or email addresses.

Examples of fraudulent domains include careers-simplepractice.com, simplepractices.com, and simplepractice.careers.

Please note that SimplePractice will never ask candidates or new hires for money or payment of any kind at any stage of the recruitment or onboarding process.

Base salary is one component of total compensation. Employees may also be eligible for an annual bonus or commission. Some roles may also be eligible for overtime pay.

The amount below represents the expected annual base compensation range for this job requisition. Ultimately, in determining your pay, we'll consider many factors including, but not limited to, skills, experience, qualifications, geographic location, and other job-related factors.

Base Compensation Range$113,600—$142,000 USD