Privacy Manager

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $121.6k - $190k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👔 Manager

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Headway

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 2019

🏥 Healthcare

🏪 Marketplace

☁️ SaaS

💰 $100M Series D - Headway on 2024-07

Healthcare • Marketplace • SaaS

Headway is a healthcare technology company (Therapymatch, Inc. ) that operates an insurance-native marketplace connecting people with licensed mental health providers — therapists and psychiatrists — for in-person and online care. Headway matches users with providers by specialty, location, and insurance coverage, handles insurance verification and billing, and offers tools for providers (provider portal and an insurance-native EHR) to reduce administrative burden. The platform partners with 100+ insurance plans, supports many languages, and emphasizes affordable, in-network mental health care.

📋 Description

• Report to the Director of Privacy/Privacy Officer • Partner with Legal, Security, Clinical, Product, and Operations • Maintain policies, procedures, and controls supporting HIPAA, 42 CFR Part 2, state privacy laws, and other applicable requirements • Keep privacy controls, data maps, and records of processing current with owners, evidence, and testing schedules • Track privacy risks and operational metrics, including request volume, aging items, and remediation progress • Translate regulatory, payer, and contractual requirements into practical guidance • Develop privacy training and employee resources • Triage privacy inquiries, individual rights requests, and potential incidents • Manage HIPAA and state privacy rights workflows, including access, amendment, accounting of disclosures, restriction, confidential communications, and deletion • Support incident investigations, documentation, root-cause analysis, and corrective actions • Coordinate evidence, timelines, and logistics for notification and regulatory submissions • Conduct privacy assessments for products, vendors, workflows, and initiatives involving PHI or sensitive personal information • Partner with the AI Governance Program to evaluate AI and machine-learning use cases • Conduct vendor privacy diligence with Legal and Security • Maintain the BAA inventory and drive identified gaps to resolution • Build practical checklists and playbooks for consistent, scalable privacy reviews

🎯 Requirements

• 4–7 years of U.S. privacy experience in a regulated industry such as healthcare, health technology, health plans, or financial services • Direct HIPAA experience strongly preferred • Hands-on experience in at least two of: privacy incidents, individual rights or DSAR workflows, privacy assessments, vendor and BAA governance, or privacy training • Ability to translate complex legal and regulatory requirements into clear, actionable guidance for non-experts • Strong judgment about privacy decisions and legal escalation • Excellent written and verbal communication skills • Ability to balance day-to-day execution with longer-term program design and improvement • Fluency with AI tools for research, drafting, and analysis • Sound judgment about verification and handling of PHI and other regulated data • Ability to evaluate AI use cases involving patient data • Collaborative, pragmatic approach to ambiguity and pushback • Strong connection to Headway’s mission • Experience with 42 CFR Part 2, minor consent and confidentiality requirements, or other heightened-confidentiality regimes is nice to have • Familiarity with payer or contractual privacy requirements is nice to have • Experience assessing privacy risk in SaaS, cloud, or AI-enabled products is nice to have • Relevant certification such as CIPP/US, CIPM, CIPT, CHPC, CHPS, or an AI governance credential is nice to have • Authorization to work in the United States for any employer

🏖️ Benefits

• Robust health and wellness benefits • Retirement savings • Meaningful ownership opportunities through equity • Reasonable accommodations for persons with disabilities