[Hiring] Senior Compliance Analyst @SimplePractice

Role Description

The Senior Compliance Analyst helps translate legal and regulatory requirements into practical controls, processes, and product guidance. Legal determines the company’s interpretation of regulatory scope and requirements; Compliance partners across the business to operationalize that interpretation, monitor execution, and escalate risk.

Responsibilities

• Product Compliance
  • Serve as the Compliance partner for assigned product squads and initiatives
  • Review Product Requirement Documents (PRDs), features, and material product changes early in the development lifecycle
  • Translate requirements and recommendations established with Legal into clear, actionable guidance for Product, Engineering, Design, and Operations
  • Assess compliance considerations for AI-enabled features, accessibility, data use, and emerging technologies
  • Document material assessments, decisions, remediation items, and escalations
• Privacy and Regulatory Operations
  • Support implementation of HIPAA and applicable federal, state, and international privacy law requirements
  • Lead compliance projects and initiatives from intake through completion, coordinating and building alignment across multiple stakeholders and cross-functional teams
  • Monitor regulatory developments, coordinate interpretation with Legal, and operationalize resulting requirements
  • Support data mapping, retention, minimization, consent management, and de-identification initiatives
  • Assist with data subject rights requests, privacy controls, and customer-facing privacy documentation
• Risk, Assurance, and Vendor Oversight
  • Conduct risk and compliance assessments and help teams implement remediation plans
  • Support HITRUST, PCI, ISO, and other audit or certification activities through evidence collection, control testing, documentation, and remediation tracking
  • Conduct compliance reviews of vendors and third parties, including data access, data use, integrations, and AI considerations
  • Maintain policies, procedures, checklists, and operational guidance for assigned programs
• Business and Customer Support
  • Support compliance-related customer inquiries and escalations in coordination with Customer Support, Marketing, and Legal
  • Participate in compliance incident response, including documentation, tracking, and corrective actions
  • Develop practical internal privacy, AI, and compliance training
  • Help develop internal guidance for teams and customer-facing trust content
  • Track workflow performance, risks, SLAs, and program metrics; recommend process improvements and appropriate automation
  • Perform other duties and support related Compliance and Risk initiatives as assigned

Qualifications

• 4 years of prior compliance experience is required, preferably in healthcare technology or SaaS. Adjacent experience in privacy, risk, or a related field is valued but does not replace this compliance requirement
• Working knowledge of HIPAA, HITRUST, U.S. privacy law requirements, and product compliance practices
• Experience partnering with Product, Engineering, Legal, Security, Marketing, or Customer Support teams
• Ability to turn complex requirements into clear operational guidance
• Strong judgment, writing, organization, and project-management skills
• Bachelor’s degree or equivalent practical experience

Bonus Points

• Experience with AI governance, accessibility, vendor risk, incident response, or healthcare-specific requirements such as 42 CFR Part 2 and ePrescribing
• Experience supporting HITRUST, PCI, ISO, or similar assurance programs
• IAPP, healthcare compliance, or comparable certification
• Experience leveraging AI, including large language models (LLMs) and other AI tools, to operationalize and scale compliance programs
• Familiarity with privacy, procurement, training, and workflow-management tools

Benefits

• Medical, dental, vision, life & disability insurance
• 401(k) plan with company match
• Flexible Time Off (FTO), wellbeing days, paid holidays, and summer Fridays
• Mental health resources
• Paid parental leave & Backup Care
• Tuition reimbursement
• Employee Resource Groups (ERGs)