Senior Counsel, Health Tech & HIPAA Compliance

Medplum; San Francisco (CA); Hybrid; USD 250,000 - 350,000; Full time

Benefits offered by this job

Competitive equity

Flexible time off

Impact on healthcare technology

Job summary

Medplum is seeking a General Counsel to lead the company's legal strategy and scale the function as we grow. This hands-on role works directly with the founders and cross‑functional teams to shape commercial relationships, guide regulatory decisions, and manage risk in a fast‑growing health tech environment.

You will negotiate enterprise software agreements, own HIPAA/privacy programs, and partner with Product and Engineering on interoperability, open source licensing, AI, and data rights.

Qualifications

• J.D. from an accredited law school and active U.S. state bar in good standing (CA admission or eligibility for in-house).
• 10+ years of relevant legal experience, including in-house at a tech company.
• Deep healthcare/health tech experience with HIPAA, BAAs, privacy and security expertise.
• Proven track record negotiating complex enterprise software & technology agreements with risk allocation clauses.

Responsibilities

• Lead negotiations for enterprise agreements, BAAs, DPAs, and strategic tech partnerships.
• Own regulatory compliance for HIPAA privacy, data security, and associated obligations.
• Provide corporate and strategic counsel on governance, financings, IP, and employment matters; manage outside counsel.
• Collaborate with Product and Engineering on healthcare interoperability, open source licensing, AI, and data rights.

Skills

Contract Negotiation

Healthcare regulatory

In-house counsel

Interoperability licensing

AI-related legal issues

Education

J.D. degree

California Bar admission (eligible)

Job description

Medplum is seeking a General Counsel to lead the company's legal strategy and scale the function as we grow. This hands-on role works directly with the founders and cross‑functional teams to shape commercial relationships, guide regulatory decisions, and manage risk in a fast‑growing health tech environment.

You will negotiate enterprise software agreements, own HIPAA/privacy programs, and partner with Product and Engineering on interoperability, open source licensing, AI, and data rights.