Privacy and Compliance Specialist

Responsibilities

• Manage and maintain the privacy compliance program, including policies, procedures, and documentation.
• Conduct and coordinate privacy impact assessments (PIAs/DPIAs) and data protection assessments for products, features, and vendors.
• Maintain records of processing activities, data inventories, and data flow maps.
• Monitor and operationalize HIPAA, CCPA/CPRA, and other applicable state privacy requirements.
• Implement and support Privacy by Design.
• Support data subject rights requests and privacy incident response workflows.
• Serve as a primary contact for privacy and data inquiries from customers, prospects, and partners.
• Draft and maintain responses to privacy questionnaires, RFPs, security assessments, and due diligence requests.
• Support review and negotiation of Data Processing Agreements and Business Associate Agreements.
• Drive privacy and compliance initiatives from planning through execution, managing timelines, stakeholders, and deliverables.
• Develop and deliver privacy training and awareness programs.
• Build and maintain privacy metrics, dashboards, and leadership reporting.
• Identify opportunities to improve and automate privacy processes and workflows.

Requirements

• 4–7 years of experience in privacy, compliance, data protection, or a related field.
• Working knowledge of HIPAA, CCPA/CPRA, state consumer privacy laws, and health data regulations.
• Demonstrated project management skills and ability to manage multiple workstreams.
• Experience with privacy impact assessments, incident response, or DSAR workflows.
• Strong written and verbal communication skills, with the ability to translate complex privacy requirements into practical guidance.
• Proactive use of AI tools to improve productivity and efficiency.

Compensation

• $100,000–$120,000 annual compensation.
• Benefits are available through the company’s careers program.