Director of Legal

Biograph•New York, NY

9d•$150,000 - $200,000•Hybrid

About The Position

We are seeking a Director of Legal to lead our legal function and oversee regulatory compliance across Biograph. In this senior role, you will act as a versatile legal generalist responsible for managing our health care compliance framework while navigating a broad spectrum of commercial, operational, and regulatory matters. As a high-growth startup, Biograph requires a hands-on leader who can balance strategic risk management with nimble execution; solving complex issues directly while strategically and judiciously leveraging external counsel and specialized agencies when needed. The ideal candidate brings extensive healthcare law experience, a proactive compliance mindset, and the agility to partner closely with leadership across clinical, technical, and operational disciplines. Ultimately, the Director of Legal will safeguard our operations, protect our patients and business, and establish a scalable legal infrastructure as we continue to grow. This is a hybrid role based in New York City. Team members typically work in our Manhattan office 3-5 days a week, with empathetic flexibility.

Requirements

Juris Doctor (JD) degree from an accredited law school and active bar admission in good standing in at least one U.S. jurisdiction.
7+ years of practicing law, with significant experience in healthcare compliance, regulatory affairs, or healthcare transaction law.
Deep working knowledge of key healthcare laws and regulations, including HIPAA/HITECH, Anti-Kickback Statute, Stark Law, CPOM, and state medical licensing requirements.
Broad generalist legal capability across contract drafting, corporate governance, intellectual property, and employment risk management.
Mastery of communication and interpersonal skills, with a proven ability to translate complex regulatory requirements into actionable, business-oriented solutions for executive leadership.
Highly self-motivated and autonomous, with the ability to manage complex projects independently and drive cross-functional alignment in a high-growth setting.
Demonstrated experience effectively managing external counsel, specialized legal vendors, and outside advisory budgets.
Unwavering attention to detail, ethical judgment, and a commitment to maintaining the highest quality standards of legal compliance.

Nice To Haves

9+ years of relevant healthcare legal experience, combining a strong law firm foundation with in-house experience at a high-growth healthcare startup or digital health company.
Proven track record of building healthcare compliance programs and legal operations from the ground up in a clinical or health-tech environment.

Responsibilities

Build, manage, and scale Biograph’s healthcare compliance program, ensuring full adherence to HIPAA, Stark Law, Anti-Kickback Statute (AKS), corporate practice of medicine (CPOM) regulations, and applicable federal and state healthcare laws.
Serve as the primary legal generalist for the company, drafting, negotiating, and reviewing a wide range of commercial contracts, clinical vendor agreements, partnership leases, software licenses, and vendor relationships.
Serve as the internal subject matter expert on federal and state regulations, accreditations, and licensure governing clinic-based imaging, labs, and other point-of-care diagnostic testing.
Manage credentialing, state licensing, and scope-of-practice protocols for all Biograph providers.
Partner with executive leadership, clinical operations, and product teams to provide practical, business-minded legal counsel on regulatory risks, expansion into new markets, and strategic initiatives.
Manage and oversee relationships with outside legal counsel and specialized regulatory agencies, ensuring cost-effective use of expert advisors for specialized matters.
Establish and monitor HIPAA, SOC 2 Type II, and other enterprise-wide risk management frameworks, including developing privacy and security policies, breach notification protocols, and patient data protection safeguards in coordination with internal IT and security teams.
Develop, implement, and maintain company-wide compliance training, internal audit procedures, and risk assessments to foster a culture of ethics and integrity across all clinic locations.
Monitor evolving healthcare regulations, digital health laws, and state medical board rules, proactively advising leadership on necessary operational adjustments.
Support corporate governance, employment matters, internal investigations, and risk management initiatives across the organization.