VP of Compliance

OpenLoop Health

About The Position

OpenLoop builds the platform behind virtual care and modern care delivery. As VP of Compliance, you will define and own our enterprise compliance strategy and operating model. You’ll design and scale a risk-based program covering clinical, pharmacy, privacy-adjacent, security-adjacent, and commercial activities. You’ll be accountable for the effectiveness of the program, for well-governed decision-making, and for measurable risk reduction across our product lines and service offerings.

Requirements

10-12+ years building and leading compliance programs in technology-forward, multi-state healthcare or pharmacy-adjacent environments (digital health, telehealth, virtual care platforms, healthtech, consumer wellness with medical claims, eRx/fulfillment).
Track record of standing up a function and hiring/mentoring a high-performing team; comfort with greenfield environments.
Demonstrated ability to prioritize ruthlessly and communicate tradeoffs.
Executive presence, excellent written/oral communication, and the ability to influence across Legal, Product, Security, and Clinical.
Builder’s mindset; systems thinker; operationally rigorous
Calm in ambiguity; bias for action; data-informed decision-making
High integrity and sound judgment; low-ego collaborator

Responsibilities

Build & lead the function: Stand up the Compliance organization (Healthcare Compliance, Pharmacy Compliance, Monitoring & Testing). Establish vision, staffing plan, budget, and success metrics.
Own the risk framework: Implement an enterprise compliance risk assessment (ECRA) that identifies the top risks, quantifies impact/likelihood, sets risk appetite, and produces a prioritized quarterly remediation roadmap.
Policy & control architecture: Create a lean, living library of policies, standards, and SOPs mapped to legal and regulatory obligations (HIPAA/HITECH, state privacy, state practice of medicine, telehealth/telepharmacy rules, CLIA, FDA/FTC/DEA touchpoints as applicable). Ensure version control, ownership, and training coverage.
Monitoring, testing, & reporting: Establish continuous monitoring, internal audits, and issue management workflows.
Product & growth enablement: Embed compliance into product development, launch gates, marketing/advertising, vendor onboarding, and new market entry. Be a consultative partner who accelerates smart bets and blocks only what’s truly high-risk.
Incident readiness & response: Coordinate with Security and Privacy (under the CISO) and Legal on investigations, breach response, regulator engagement, and consumer communications. Lead post-incident lessons learned.
Third-party & FDR oversight: Define due diligence, contracting standards, and ongoing oversight for vendors, prescribers, partner pharmacies, and other downstream entities.
Training & culture: Deliver role-based, high-signal training; cultivate an open-reporting culture with non-retaliation, hotline oversight, and trend analysis.
Regulatory engagement: Serve as the primary point of contact to relevant regulators and accreditation bodies. Proactively monitor regulatory change and prepare the business.
Board governance: Provide updates to the Board as required.