About this role
The person in this role will serve as the Company’s HIPAA Privacy Officer under the direction of the Senior Director of Compliance/Compliance Officer. This position is responsible for overseeing Transcarent’s enterprise-wide privacy program and will also provide support for the Company’s AI governance initiatives, particularly as it relates to data privacy and regulatory compliance.
What you’ll do
- Serve as the Company’s HIPAA Privacy Officer and lead the enterprise-wide privacy compliance strategy under the direction of the Senior Director of Compliance.
- Oversee the day-to-day operations of the Privacy Program, including the development, implementation, and maintenance of policies and procedures to ensure ongoing compliance with applicable privacy laws and regulations (e.g., HIPAA, CCPA/CPRA, and related data privacy laws).
- Continuously evaluate and update privacy documentation—including policies, procedures, notices, training materials, internal protocols, and third-party agreements—to reflect evolving regulatory requirements, organizational changes, and best practices in privacy management.
- Define the requirements for Transcarent’s Business Associate Agreements (BAAs), work with the legal and vendor management teams to ensure agreements are in place with third-parties as needed.
- Oversee the Company’s approach to business associate oversight, ensuring all privacy obligations, data handling requirements, and risk management expectations are properly addressed through robust governance mechanisms.
- Design, implement, and manage the Company’s privacy training and education program, tailoring content to business functions and regulatory obligations and delivering additional trainings, in a variety of formats, to promote organizational awareness and accountability.
- Conduct risk-based auditing and monitoring activities to assess the effectiveness of the privacy program and identify opportunities for process improvement and control enhancement.
- Lead and support Compliance’s triage and response to all privacy and data-related inquiries and reports, including concerns submitted via the Ethics and Compliance Hotline, serving as primary point for complex, high-risk, or escalated matters and ensuring timely and appropriate documentation.
- Lead and support investigations of potential or actual privacy incidents, including suspected HIPAA violations, and manage or oversee the end-to-end response lifecycle—from breach risk assessment and containment through regulatory notification and corrective action plan implementation.
- Develop and oversee implementation of remediation plans for identified non-compliance, monitoring closure and validation of corrective actions in collaboration with business stakeholders.
- Act as the primary subject matter expert on health and general data privacy, advising executive leadership team, the business, and legal counsel on privacy implications of strategic initiatives, partnerships, and innovations.
- Maintain a comprehensive understanding of Transcarent’s product ecosystem, data flows, and information-sharing practices, and act to influence the business in operating under privacy-by-design principles.
- Provide strategic input on the development and refinement of risk-based monitoring, compliance testing, and program evaluation methodologies to ensure continuous improvement of privacy safeguards.
- Support the definition and tracking of privacy-related key performance indicators (KPIs) and assist with the preparation of reports and communications to senior management and the Board of Directors regarding compliance program maturity, metrics, and milestones.
- Collaborate closely with internal teams—including Legal, Security, Product, Engineering, HR, and Operations—as well as external consultants and service providers, to ensure comprehensive enterprise alignment in the execution of privacy obligations.
- Monitor and interpret changes in federal, state, and international privacy regulations, industry trends, and enforcement actions, and translate those insights into proactive updates to policies, processes, and training content.
- Support the development and maintenance of the Company’s AI governance program, with a focus on privacy-related AI risks and compliance considerations.
- Participate in the AI Governance Committee as the privacy subject matter expert, advising on data protection and privacy compliance matters.
- Other duties as assigned by the Compliance Officer or Chief Legal Officer.
What we’re looking for
- 10-15+ years of relevant privacy or legal experience, including experience developing and managing a privacy compliance program.
- CIPP/US, CIPM, and/or CIPT certification required; CHC or CHPC certification a plus.
- Working knowledge of relevant regulatory frameworks - HIPAA, ERISA, ADA, state and federal data privacy laws, IRS Code (as it relates to health and welfare plans), Price Transparency regulations, licensure requirements, TPA and state insurance regulations, FDA mobile medical app and medical device standards, FTC issues for mobile apps and online health programs, and state Corporate Practice of Medicine laws.
- Demonstrated experience addressing privacy considerations in AI/ML systems, including training data governance, algorithmic transparency, automated decision-making, and emerging AI regulations.
- Deep knowledge of multi-state consumer privacy laws (CCPA/CPRA, Virginia CDPA, Colorado CPA, Connecticut DPA, and other emerging state frameworks), with experience operationalizing compliance across jurisdictions.
- Proven track record leading breach response and regulatory investigations, including OCR audits, state attorney general inquiries, and breach notification processes.
- Experience embedding privacy-by-design principles into product development lifecycles, with demonstrated ability to partner effectively with Product and Engineering teams.
- Strong background in third-party risk management, including privacy due diligence, vendor assessments, and oversight of data processors and business associates.
- Excellent judgment and communication skills, with a strong attention to detail.
- The ability to adapt quickly to new surroundings and in a fast-paced environment.
- Experience with health technology companies and/or startup organizations.
Nice to have
- J.D. degree preferred.
- Experience with international privacy frameworks (e.g., GDPR) and cross-border data transfer mechanisms; familiarity with digital health, telehealth, and mobile health application privacy requirements; experience with state health information exchange (HIE) regulations and interoperability standards; background in FTC enforcement trends related to health apps and consumer protection.
Who we are
Transcarent is the One Place for Health and Careᵀᴹ, bringing medical, pharmacy, and point solutions together with the WayFindingᵀᴹ experience, the first and only generative AI-powered health and care platform for health consumers. Our WayFinding experience, paired with transparent and consumer-driven pharmacy care, 2nd.MD expert medical opinions, and virtual primary care, works seamlessly with comprehensive Care Experiences – Cancer Care, Surgery Care, and Weight Health – to support people with all of their health needs, simple or serious. More than 1,700 employers and health plans rely on us to provide information, guidance, and care, empowering health consumers with more choice, an experience they love, access to higher-quality care, and lower costs for 21 million Members. For more information, visit transcarent.com, and follow us on LinkedIn.
At Transcarent, our values guide everything we do:
- People First: We prioritize our Members, clients, and each other in every decision
- Care: Every decision starts with improving health and care for our Members
- Resilience: We push boundaries and take the uncharted path to change an industry
- Results: We take ownership, solve with speed, and deliver for our people and each other
- Humble and Human: We lead with humility, bring fun to tough moments, and go further together
Total Rewards
Individual compensation packages are based on a few different factors unique to each candidate, including primary work location and an evaluation of a candidate’s skills, experience, market demands, and internal equity.
Salary is just one component of Transcarent's total package. All regular employees are also eligible for the corporate bonus program or a sales incentive (target included in OTE) as well as stock options.
Our benefits and perks programs include, but are not limited to:
- Competitive medical, dental, and vision coverage
- Competitive 401(k) Plan with a generous company match
- Flexible Time Off/Paid Time Off, 13 paid holidays
- Protection Plans including Life Insurance, Disability Insurance, and Supplemental Insurance
- Mental Health and Wellness benefits
Transcarent is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. If you are a person with a disability and require assistance during the application process, please don’t hesitate to reach out!
Research shows that candidates from underrepresented backgrounds often don’t apply unless they meet 100% of the job criteria. While we have worked to consolidate the minimum qualifications for each role, we aren’t looking for someone who checks each box on a page; we’re looking for active learners and people who care about disrupting the current health and care with their unique experiences.
Top Skills
What We Do
Transcarent is a health and care experience company that makes it easy to get the high-quality, affordable health and care that everyone and their families deserve – where and when they want it, on their terms. Transcarent puts health consumers back in charge by directly connecting them with an integrated ecosystem of high-value providers and health solutions, providing transparent information, and offering trusted guidance – in as little as 60 seconds, 24/7/365, from the palm of their hand, often at no cost to Members and at a lower cost to their employer. Transcarent takes accountability for results – offering at-risk pricing models and transparent impact reporting to align incentives towards measurably better experience, better health, and lower costs.
