Privacy Manager (Remote)

About the role

Rula is on the lookout for a Privacy Manager to lead the daily operations related to our healthcare privacy and AI compliance efforts. This position plays a crucial role in supporting our Legal and Compliance team by conducting thorough privacy assessments, managing responses to incidents, and ensuring that third-party data management adheres to patient privacy standards. The ideal candidate will be adept at translating complex regulatory requirements into practical processes that protect our users while facilitating swift product development.

Key facts

What you'll do

• Lead the execution of privacy impact assessments and oversee the full lifecycle of privacy-related incidents, from initial reporting to thorough investigation and resolution.
• Ensure that all vendors and partners comply with privacy regulations when handling patient data.
• Collaborate closely with product, engineering, and clinical teams to integrate privacy requirements seamlessly into existing workflows and systems.
• Regularly review and update privacy policies and procedures to ensure they align with changing regulations and the evolving needs of the business.
• Assist the Director of Privacy in the development and maintenance of the company's comprehensive privacy program.
• Conduct training sessions to educate staff on privacy policies and best practices.
• Monitor compliance with privacy regulations and report any discrepancies or areas for improvement.
• Serve as a point of contact for privacy-related inquiries and issues within the organization.

Requirements

• At least 5 years of experience in the fields of compliance and data privacy, with a minimum of 2-3 years in a healthcare environment governed by HIPAA and HITECH regulations.
• Proven experience in conducting privacy impact assessments and managing the lifecycle of privacy incidents effectively.
• Strong knowledge of HIPAA, HITECH, and various state-specific medical privacy laws.
• Demonstrated ability to collaborate with information security or IT departments on risk management and incident review processes.
• Experience in establishing or enhancing privacy operational processes, controls, or governance frameworks within healthcare organizations.
• Excellent communication skills, both written and verbal, to convey complex privacy concepts to diverse audiences.

Nice to have

• Previous experience in a dynamic digital health, health tech, or telehealth environment.
• Professional privacy certifications such as CIPP/US, CIPM, or CHPC would be advantageous.
• Familiarity with assessing the privacy implications of AI/ML models or automated clinical processes.
• Experience in creating operational reports or dashboards to monitor privacy metrics.
• Background in working with modern SaaS, cloud-based, or AI-enabled healthcare and productivity tools.
• Experience in developing and delivering effective privacy training programs for employees.

Skills & tools

• Proficient in HIPAA and HITECH regulations
• Knowledge of state health privacy laws
• Expertise in conducting Privacy Impact Assessments (PIAs)
• Skilled in incident triage and investigation
• Experience in vendor risk management
• Competence in risk tracking and security incident review
• Familiarity with privacy operational processes and governance frameworks

Practical notes

• This position is fully remote within the United States; however, candidates residing in Hawaii are not eligible for this role.
• Full-time employees are entitled to a comprehensive benefits package, which includes medical, dental, vision, life insurance, disability coverage, and flexible spending accounts (FSA/HSA).
• A 401(k) retirement plan is available for employees.
• Generous paid time off policies include two company-wide shutdown weeks each year.
• Paid parental leave is offered to eligible employees.
• An Employee Assistance Program (EAP) is available to support employee well-being.
• A quarterly stipend is provided for team activities to foster collaboration and camaraderie.
• Employees have access to community and employee resource groups for support and networking.
• New hires receive a stipend to set up their home office, along with a monthly allowance of $50 for internet or cell phone expenses.
• Additionally, a $50 monthly wellness stipend is part of the Wellness at Rula initiative, promoting employee health and wellness.

About the company

Rula is a feminine given name of Arabic origin.