Privacy Manager

Vaga não está no LinkedIn

🕒 Setembro 1

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $121.600 - $190.000 / ano

⏰ Tempo Integral

🟡 Pleno

🟠 Sênior

👔 Gerente

👻 Score fantasma 0%

O que significa: quão provável esta vaga está aberta sem contratação ativa.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Configurar Alerta de Email para Novas Vagas

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo

Headway

SiteLinkedInTodas as Vagas

501 - 1000 funcionários

Fundada em 2019

🏥 Saúde

🏪 Marketplace

☁️ SaaS

💰 $100.000.000 Series D - Headway em 2024-07

Healthcare • Marketplace • SaaS

A Headway é uma empresa de tecnologia na área da saúde (Therapymatch, Inc. ) que opera um marketplace nativo de seguros, conectando pessoas a profissionais de saúde mental licenciados — terapeutas e psiquiatras — para atendimentos presenciais e online. A Headway conecta usuários a prestadores por especialidade, localização e cobertura de seguro, gerencia a verificação de seguro e faturamento, e oferece ferramentas para prestadores (portal do prestador e um prontuário eletrônico nativo de seguros) para reduzir o ônus administrativo. A plataforma possui parcerias com mais de 100 planos de seguro, oferece suporte em vários idiomas e prioriza a acessibilidade a cuidados de saúde mental dentro da rede.

Descrição

• Report to the Director of Privacy/Privacy Officer • Partner with Legal, Security, Clinical, Product, and Operations • Maintain policies, procedures, and controls supporting HIPAA, 42 CFR Part 2, state privacy laws, and other applicable requirements • Keep privacy controls, data maps, and records of processing current with owners, evidence, and testing schedules • Track privacy risks and operational metrics, including request volume, aging items, and remediation progress • Translate regulatory, payer, and contractual requirements into practical guidance • Develop privacy training and employee resources • Triage privacy inquiries, individual rights requests, and potential incidents • Manage HIPAA and state privacy rights workflows, including access, amendment, accounting of disclosures, restriction, confidential communications, and deletion • Support incident investigations, documentation, root-cause analysis, and corrective actions • Coordinate evidence, timelines, and logistics for notification and regulatory submissions • Conduct privacy assessments for products, vendors, workflows, and initiatives involving PHI or sensitive personal information • Partner with the AI Governance Program to evaluate AI and machine-learning use cases • Conduct vendor privacy diligence with Legal and Security • Maintain the BAA inventory and drive identified gaps to resolution • Build practical checklists and playbooks for consistent, scalable privacy reviews

🎯 Requisitos

• 4–7 years of U.S. privacy experience in a regulated industry such as healthcare, health technology, health plans, or financial services • Direct HIPAA experience strongly preferred • Hands-on experience in at least two of: privacy incidents, individual rights or DSAR workflows, privacy assessments, vendor and BAA governance, or privacy training • Ability to translate complex legal and regulatory requirements into clear, actionable guidance for non-experts • Strong judgment about privacy decisions and legal escalation • Excellent written and verbal communication skills • Ability to balance day-to-day execution with longer-term program design and improvement • Fluency with AI tools for research, drafting, and analysis • Sound judgment about verification and handling of PHI and other regulated data • Ability to evaluate AI use cases involving patient data • Collaborative, pragmatic approach to ambiguity and pushback • Strong connection to Headway’s mission • Experience with 42 CFR Part 2, minor consent and confidentiality requirements, or other heightened-confidentiality regimes is nice to have • Familiarity with payer or contractual privacy requirements is nice to have • Experience assessing privacy risk in SaaS, cloud, or AI-enabled products is nice to have • Relevant certification such as CIPP/US, CIPM, CIPT, CHPC, CHPS, or an AI governance credential is nice to have • Authorization to work in the United States for any employer

🏖️ Benefícios

• Robust health and wellness benefits • Retirement savings • Meaningful ownership opportunities through equity • Reasonable accommodations for persons with disabilities