# Privacy Manager

**Company:** [Headway](https://hotfix.jobs/companies/headway)
**Location:** Remote
**Role:** Legal
**Salary:** $122k – $190k/yr
**Experience:** 4+ years
**Skills:** HIPAA, 42 Cfr Part 2, State Privacy Laws, Privacy Assessments, Privacy Incident Management, Dsar Workflows, Vendor Governance, Baa Governance, Ai Governance, Machine Learning, Phi, Data Mapping, Records Of Processing, SaaS, Cloud Computing
**Posted:** 2026-09-01

> Own and improve privacy operations for a healthcare technology company, covering regulated data, individual rights, incidents, vendors, products, and AI use cases. The role requires 4–7 years of U.S. privacy experience, preferably including direct HIPAA work.

## Job Description

## Responsibilities
- Operate and improve the privacy program across HIPAA, 42 CFR Part 2, state privacy laws, behavioral health confidentiality, individual rights, vendor governance, and responsible AI use.
- Maintain privacy policies, procedures, controls, data maps, records of processing, ownership records, evidence, and testing schedules.
- Track privacy risks and operational metrics, including request volume, aging items, and remediation progress.
- Translate regulatory, payer, and contractual requirements into practical guidance and develop privacy training and resources.
- Triage privacy inquiries, individual rights requests, and potential incidents.
- Manage HIPAA and state privacy rights workflows, including access, amendment, accounting of disclosures, restriction, confidential communications, and deletion.
- Support incident investigations, documentation, root-cause analysis, corrective actions, notifications, and regulatory submissions.
- Conduct privacy assessments for products, vendors, workflows, and initiatives involving PHI or sensitive personal information.
- Evaluate AI and machine-learning use cases for appropriate data use, minimum-necessary access, retention, transparency, and human oversight.
- Conduct vendor privacy diligence with Legal and Security, maintain the BAA inventory, and drive gaps to resolution.
- Build scalable privacy checklists and playbooks.

## Requirements
- 4–7 years of U.S. privacy experience in a regulated industry, such as healthcare, health technology, health plans, or financial services.
- Direct HIPAA experience strongly preferred.
- Hands-on experience in at least two of: privacy incidents, individual rights or DSAR workflows, privacy assessments, vendor and BAA governance, or privacy training.
- Ability to translate complex legal and regulatory requirements into clear, actionable guidance for non-experts.
- Strong judgment, communication, documentation, cross-functional influence, and ability to balance execution with program design.
- Fluency with AI tools for research, drafting, and analysis, with sound judgment regarding verification and regulated data.
- Ability to evaluate AI use cases involving patient data.
- Collaborative, pragmatic approach to ambiguity and pushback.

## Nice to have
- Experience with 42 CFR Part 2, minor consent and confidentiality requirements, or other heightened-confidentiality regimes.
- Familiarity with payer or contractual privacy requirements.
- Experience assessing privacy risk in SaaS, cloud, or AI-enabled products.
- CIPP/US, CIPM, CIPT, CHPC, CHPS, or an AI governance credential.

## Compensation
- $121,600–$190,000 annually.

## Similar jobs

- [Compliance Controls & Monitoring](https://hotfix.jobs/jobs/e6dcde5c-6ff9-4eac-b5cd-62364032c712) - OnePay - Remote - $120k – $150k/yr
- [Litigation Paralegal](https://hotfix.jobs/jobs/dbd736d8-66f7-4de3-95a7-3fed501c55d3) - Perplexity - San Francisco, CA - $120k – $195k/yr
- [Employment Counsel](https://hotfix.jobs/jobs/20b10d67-708e-4858-8543-35b57e1c2be0) - 6sense - Remote - $128k – $187k/yr
- [Commercial Counsel](https://hotfix.jobs/jobs/69661cc1-fc52-4426-836b-f7fea6b1ca82) - Greenhouse - Remote - $128k – $167k/yr
- [Legal Operations Specialist](https://hotfix.jobs/jobs/d35999a5-171e-453f-8ffc-b54aa8402a51) - xAI - Palo Alto, CA - $110k – $135k/yr

**Apply:** https://hotfix.jobs/jobs/a1cd5c37-f0e9-441e-9146-dae78f1de89e
**Canonical:** https://hotfix.jobs/jobs/a1cd5c37-f0e9-441e-9146-dae78f1de89e