Legal & Privacy Compliance Operations Manager

RVO Health

4h•$104,000 - $115,000•Remote

About The Position

RVO Health is seeking a legal & privacy compliance professional to join its legal, privacy and compliance team. The role will play a key part in RVO Health’s privacy and health care compliance programs, managing the operations of those programs, and supporting the business in meeting various legal, privacy, and regulatory requirements, including federal and state privacy laws, HIPAA, TCPA, FDA, and other applicable laws and regulations. Experience in the consumer-facing digital health space or healthcare technology industry is a plus.

Requirements

At least 2-4 years’ experience working in privacy and/or healthcare compliance, with a focus on general health privacy and/or HIPAA.
Business acumen with the ability to interact and communicate across all levels.
High level of personal integrity.
Growth-mindset, with a passion for learning and solving problems.
Ability to work independently to execute on program and company initiatives.
Ability to professionally handle confidential matters and exude the appropriate level of judgment and maturity.
Methodical and diligent with outstanding planning and organization abilities.
Analytical mind able to “see” the complexities of procedures and regulations.
Excellent written and oral communication skills and high attention to detail within a fast-paced environment.
Ability to work across a variety of privacy and compliance related projects.
Experience working within an internal compliance program.

Nice To Haves

BS/BA in a relevant field
Experience researching, interpreting, and reporting on a myriad of laws and regulations.
Experience using AI tools to support compliance operations is a plus.
Experience with privacy management tools or software is a plus.
Familiarity with privacy regulations such as GDPR, CCPA, MHMDA, or similar frameworks is a plus.
Familiarity with health care and digital laws and regulations such as HIPAA, Anti–Kickback Statute, TCPA, FTC guidance, and others is a plus.

Responsibilities

Overseeing and managing the day-to-day operations of privacy and regulatory compliance programs.
Developing and maintaining program documentation, including policies, procedures, standards, and guidance.
Tracking regulatory changes and updates.
Conducting risk assessments, audits, gap assessments, and tests.
Developing and maintaining training and awareness materials.
Managing program reporting and metrics.
Establishing privacy and regulatory frameworks for vendor management, including the development and maintenance of questionnaires, checklists, playbooks, and other tools.
Managing programs for detecting, investigating, and responding to compliance program issues, including reports of noncompliance, complaints, and investigations from regulators.
Developing, maintaining, and implementing incident response programs.