Senior Compliance Analyst

SimplePractice

20h•$113,600 - $142,000•Remote

About The Position

At SimplePractice, we are improving access to quality care by equipping health and wellness clinicians with all the tools they need to thrive in private practice. More than 250,000 providers trust SimplePractice to build their business through our industry-leading software with powerful tools that simplify every part of practice management. From admin work to clinical care, our suite of innovative solutions work together to reduce administrative burden—empowering solo and small group practitioners to thrive alongside their clients. Award-winning and people-first, SimplePractice is shaping the future of health tech. In 2026, we were recognized by BuiltIn as a Best Remote Company to Work For, Software Guru's Best Places to Code, Becker Healthcare Telehealth Companies to Know, and we won a MedTech Breakthrough Award for Best Practice Management Solution Provider. The Senior Compliance Analyst helps translate legal and regulatory requirements into practical controls, processes, and product guidance. Legal determines the company’s interpretation of regulatory scope and requirements; Compliance partners across the business to operationalize that interpretation, monitor execution, and escalate risk.

Requirements

4 years of prior compliance experience is required, preferably in healthcare technology or SaaS. Adjacent experience in privacy, risk, or a related field is valued but does not replace this compliance requirement
Working knowledge of HIPAA, HITRUST, U.S. privacy law requirements, and product compliance practices
Experience partnering with Product, Engineering, Legal, Security, Marketing, or Customer Support teams
Ability to turn complex requirements into clear operational guidance
Strong judgment, writing, organization, and project-management skills
Bachelor’s degree or equivalent practical experience

Nice To Haves

Experience with AI governance, accessibility, vendor risk, incident response, or healthcare-specific requirements such as 42 CFR Part 2 and ePrescribing
Experience supporting HITRUST, PCI, ISO, or similar assurance programs
IAPP, healthcare compliance, or comparable certification
Experience leveraging AI, including large language models (LLMs) and other AI tools, to operationalize and scale compliance programs
Familiarity with privacy, procurement, training, and workflow-management tools

Responsibilities

Serve as the Compliance partner for assigned product squads and initiatives
Review Product Requirement Documents (PRDs), features, and material product changes early in the development lifecycle
Translate requirements and recommendations established with Legal into clear, actionable guidance for Product, Engineering, Design, and Operations
Assess compliance considerations for AI-enabled features, accessibility, data use, and emerging technologies
Document material assessments, decisions, remediation items, and escalations
Support implementation of HIPAA and applicable federal, state, and international privacy law requirements
Lead compliance projects and initiatives from intake through completion, coordinating and building alignment across multiple stakeholders and cross-functional teams
Monitor regulatory developments, coordinate interpretation with Legal, and operationalize resulting requirements
Support data mapping, retention, minimization, consent management, and de-identification initiatives
Assist with data subject rights requests, privacy controls, and customer-facing privacy documentation
Conduct risk and compliance assessments and help teams implement remediation plans
Support HITRUST, PCI, ISO, and other audit or certification activities through evidence collection, control testing, documentation, and remediation tracking
Conduct compliance reviews of vendors and third parties, including data access, data use, integrations, and AI considerations
Maintain policies, procedures, checklists, and operational guidance for assigned programs
Support compliance-related customer inquiries and escalations in coordination with Customer Support, Marketing, and Legal
Participate in compliance incident response, including documentation, tracking, and corrective actions
Develop practical internal privacy, AI, and compliance training
Help develop internal guidance for teams and customer-facing trust content
Track workflow performance, risks, SLAs, and program metrics; recommend process improvements and appropriate automation
Perform other duties and support related Compliance and Risk initiatives as assigned