Privacy and Compliance Specialist

Virta Health

1d•$100,000 - $120,000•Remote

About The Position

Virta Health is seeking a Privacy & Compliance Specialist to manage the daily execution of privacy operations, oversee cross-functional compliance projects, and act as a key contact for privacy-related inquiries from customers and partners. This role involves close collaboration with Legal, Engineering, Product, Security, and Commercial teams to enhance Virta's privacy framework as the company expands. It is a high-impact, high-autonomy position suited for an expert at the intersection of privacy law, project management, and health technology operations.

Requirements

4 to 7 years of experience in privacy, compliance, data protection, or a related field
Working knowledge of HIPAA, state consumer privacy laws (including CCPA/CPRA), and health data regulations
Demonstrated project management skills with the ability to manage multiple workstreams simultaneously
Experience with privacy impact assessments, incident response, or data subject request (DSAR) workflows
Strong written and verbal communication skills, with the ability to translate complex privacy requirements into practical guidance
Proactive use of AI tools to improve individual output and efficiency

Responsibilities

Manage and maintain Virta’s privacy compliance program, including policies, procedures, and documentation, with supervision.
Conduct and coordinate privacy impact assessments (PIAs/DPIAs) for new products, features, and vendor relationships.
Maintain records of processing activities (RoPA), data inventories, and data flow maps.
Monitor and operationalize requirements under HIPAA, state privacy laws (CCPA/CPRA and others), and other applicable frameworks.
Implement and support Privacy by Design principles across the business.
Support data subject rights requests (DSARs) and privacy incident response workflows.
Serve as a primary point of contact for privacy and data-related inquiries from customers, prospects, and partners.
Draft and maintain responses to privacy questionnaires, RFPs, security assessments, and due diligence requests.
Support the negotiation and review of Data Processing Agreements (DPAs) and Business Associate Agreements (BAAs).
Drive privacy and compliance initiatives from planning through execution, managing timelines, stakeholders, and deliverables.
Develop and deliver privacy training and awareness programs across the organization.
Build and maintain privacy metrics, dashboards, and reporting for leadership and Board visibility.
Identify opportunities to improve and automate privacy processes and workflows.