Note: The job is a remote job and is open to candidates in USA. SimplePractice provides health and wellness clinicians with software and tools for private practice management. The Senior Compliance Analyst translates legal and regulatory requirements into practical controls, processes, and product guidance, partnering with Legal and cross-functional teams to operationalize compliance. The role focuses on product compliance, privacy and regulatory operations, risk and assurance, vendor oversight, customer support, incident response, training, and program improvement.
Responsibilities
- Serve as the Compliance partner for assigned product squads and initiatives
- Review Product Requirement Documents (PRDs), features, and material product changes early in the development lifecycle
- Translate requirements and recommendations established with Legal into clear, actionable guidance for Product, Engineering, Design, and Operations
- Assess compliance considerations for AI-enabled features, accessibility, data use, and emerging technologies
- Document material assessments, decisions, remediation items, and escalations
- Support implementation of HIPAA and applicable federal, state, and international privacy law requirements
- Lead compliance projects and initiatives from intake through completion, coordinating and building alignment across multiple stakeholders and cross-functional teams
- Monitor regulatory developments, coordinate interpretation with Legal, and operationalize resulting requirements
- Support data mapping, retention, minimization, consent management, and de-identification initiatives
- Assist with data subject rights requests, privacy controls, and customer-facing privacy documentation
- Conduct risk and compliance assessments and help teams implement remediation plans
- Support HITRUST, PCI, ISO, and other audit or certification activities through evidence collection, control testing, documentation, and remediation tracking
- Conduct compliance reviews of vendors and third parties, including data access, data use, integrations, and AI considerations
- Maintain policies, procedures, checklists, and operational guidance for assigned programs
- Support compliance-related customer inquiries and escalations in coordination with Customer Support, Marketing, and Legal
- Participate in compliance incident response, including documentation, tracking, and corrective actions
- Develop practical internal privacy, AI, and compliance training
- Help develop internal guidance for teams and customer-facing trust content
- Track workflow performance, risks, SLAs, and program metrics; recommend process improvements and appropriate automation
- Perform other duties and support related Compliance and Risk initiatives as assigned
Skills
- 4 years of prior compliance experience is required, preferably in healthcare technology or SaaS. Adjacent experience in privacy, risk, or a related field is valued but does not replace this compliance requirement
- Working knowledge of HIPAA, HITRUST, U.S. privacy law requirements, and product compliance practices
- Experience partnering with Product, Engineering, Legal, Security, Marketing, or Customer Support teams
- Ability to turn complex requirements into clear operational guidance
- Strong judgment, writing, organization, and project-management skills
- Bachelor's degree or equivalent practical experience
- Experience with AI governance, accessibility, vendor risk, incident response, or healthcare-specific requirements such as 42 CFR Part 2 and ePrescribing
- Experience supporting HITRUST, PCI, ISO, or similar assurance programs
- IAPP, healthcare compliance, or comparable certification
- Experience leveraging AI, including large language models (LLMs) and other AI tools, to operationalize and scale compliance programs
- Familiarity with privacy, procurement, training, and workflow-management tools
Benefits
- Medical, dental, vision, life & disability insurance
- 401(k) plan with company match
- Flexible Time Off (FTO), wellbeing days, paid holidays, and summer Fridays
- Mental health resources
- Paid parental leave & Backup Care
- Tuition reimbursement
- Employee Resource Groups (ERGs)
Company Overview