Chief Compliance Officer

OpenLoop Health

About The Position

OpenLoop builds the platform behind virtual care and modern care delivery. As Chief Compliance Officer (CCO), you will define and own our enterprise compliance strategy and operating model. You’ll design and scale a risk-based program covering clinical, pharmacy, privacy-adjacent, security-adjacent, and commercial activities. You’ll be accountable for the effectiveness of the program, for well-governed decision-making, and for measurable risk reduction across our product lines and service offerings.

Requirements

10-15+ years building and leading compliance programs in technology-forward, multi-state healthcare or pharmacy-adjacent environments (digital health, wearables, telehealth, virtual care platforms, healthtech, consumer wellness with medical claims, eRx/fulfillment).
Track record of hiring/mentoring a high-performing team; comfort with greenfield environments.
Demonstrated ability to prioritize ruthlessly and communicate tradeoffs.
Executive presence, excellent written/oral communication, and the ability to influence across Legal, Product, Security, and Clinical.
Builder’s mindset; systems thinker; operationally rigorous.
Calm in ambiguity; bias for action; data-informed decision-making.
High integrity and sound judgment; low-ego collaborator.

Responsibilities

Build & lead the Compliance organization (Healthcare, Pharmacy, Privacy, Audit). Establish vision, staffing plan, budget, and success metrics.
Create a lean, living library of policies, standards, and SOPs mapped to legal and regulatory obligations (HIPAA/HITECH, state privacy, state practice of medicine, telehealth/telepharmacy rules, CLIA, FDA/FTC/DEA touchpoints as applicable). Ensure version control, ownership, and training coverage.
Establish continuous monitoring, internal audits, and issue management workflows.
Embed compliance into product development, launch gates, marketing/advertising, vendor onboarding, and new market entry. Be a consultative partner who accelerates smart bets and blocks only what’s truly high-risk.
Coordinate with Security and Legal on investigations, breach response, regulator engagement, and consumer communications. Lead post-incident lessons learned.
Define due diligence, contracting standards, and ongoing oversight for vendors, prescribers, partner pharmacies, and other downstream entities.
Deliver role-based, high-signal training; cultivate an open-reporting culture with non-retaliation, hotline oversight, and trend analysis.
Serve as the primary point of contact to relevant regulators and accreditation bodies. Proactively monitor regulatory change and prepare the business.
Provide updates to the Board as required.
Other duties as assigned.