Head of Compliance – HIPAA and Security

Bask Health

Head of Compliance (HIPAA) leading strategic legal support and data governance for Bask Health. Overseeing compliance frameworks, training, and regulatory adherence in a remote setup.

Posted 4/14/2026full-timeRemote • 🇺🇸 United StatesLeadWebsite

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Reporting to the General Counsel this position provides strategic and operational legal support across legal issues in cybersecurity, data privacy, artificial intelligence, and data governance.
Develop, implement, and maintain the organization's comprehensive data governance and security, privacy and compliance frameworks and policies.
Serve as the Privacy Officer and primary legal and operational authority on HIPAA, including Privacy Rule and Security Rule requirements.
Ensure adherence to global, federal, state and emerging privacy laws (GDPR, CPRA, etc.), as applicable.
Advise executive leadership on cybersecurity risk, mitigation, data governance, and regulatory obligations.
Lead internal audits, risk assessments, and incident response planning.
Manage relationships with outside counsel, regulators, and third-party vendors on compliance matters.
Educate staff on data handling, privacy practices, and security threats. Organize and oversee employee training programs on data privacy, security protocols, and HIPAA obligations.
Monitor evolving federal and state data privacy legislation and assess organizational impact.
Draft and enforce internal data security policies, procedures, and Business Associate Agreements (BAAs).
Represent the organization in regulatory investigations or breach notification proceedings, remediation efforts, and regulatory notifications.

Requirements

What you’ll need

J.D. from an accredited law school and active bar membership required in NY
4 to 6 years of experience in health law, data privacy, or cybersecurity law
Deep expertise in HIPAA/HITECH, state privacy laws, and corporate data security standards
Experience advising on or litigating data breach, privacy, or regulatory enforcement matters
Familiarity with NIST, SOC 2, ISO 27001, or similar security frameworks
Strong understanding of emerging technologies, cloud infrastructure, AI, and their legal implications
Bonus Qualifications
IAPP Certified Information Privacy Professional designation (CIPP) or similar
Certified HIPAA Professional (CHP) or equivalent

Benefits

Comp & perks

🌐 Worldwide Post a Job Affiliates ❌ Jobs You've Hidden ⭐️ Saved Jobs ✅ Applied Jobs Account Bask Health Website LinkedIn All Job Openings 11 - 50 employees ⚕️ Healthcare Insurance ☁️ SaaS 🛍️ eCommerce 💰 Pre Seed Round on 2022-05 Healthcare Insurance
SaaS
eCommerce Bask Health is a robust platform providing a comprehensive suite of customizable telehealth solutions. It offers tools such as a questionnaire builder, patient portals, and pharmacy fulfillment services, all secured with strong encryption and HIPAA-compliance. Bask Health seamlessly integrates telehealth and e-commerce, enabling streamlined patient care from consultation to delivery. The platform supports entrepreneurs, doctors, and developers by offering scalable no-code solutions that enhance user experience and business growth. With its nationwide pharmacy network, Bask Health empowers businesses to efficiently manage prescriptions, patient data, and order fulfillment across the entire digital health landscape. Head of Compliance – HIPAA and Security Job not on LinkedIn 🔥 47 minutes ago 🇺🇸 United States – Remote ⏰ Full Time 🔴 Lead 👮‍♂️ Cybersecurity / Security Engineer Cloud Cyber Security Apply Now Find Hiring Managers Customize resume for this job ☆ Save ☑️ Mark as applied ❌ Hide Report problem 📋 Description
Reporting to the General Counsel this position provides strategic and operational legal support across legal issues in cybersecurity, data privacy, artificial intelligence, and data governance.
Develop, implement, and maintain the organization's comprehensive data governance and security, privacy and compliance frameworks and policies.
Serve as the Privacy Officer and primary legal and operational authority on HIPAA, including Privacy Rule and Security Rule requirements.
Ensure adherence to global, federal, state and emerging privacy laws (GDPR, CPRA, etc.), as applicable.
Advise executive leadership on cybersecurity risk, mitigation, data governance, and regulatory obligations.
Lead internal audits, risk assessments, and incident response planning.
Manage relationships with outside counsel, regulators, and third-party vendors on compliance matters.
Educate staff on data handling, privacy practices, and security threats. Organize and oversee employee training programs on data privacy, security protocols, and HIPAA obligations.
Monitor evolving federal and state data privacy legislation and assess organizational impact.
Draft and enforce internal data security policies, procedures, and Business Associate Agreements (BAAs).
Represent the organization in regulatory investigations or breach notification proceedings, remediation efforts, and regulatory notifications. 🎯 Requirements
J.D. from an accredited law school and active bar membership required in NY
4 to 6 years of experience in health law, data privacy, or cybersecurity law
Deep expertise in HIPAA/HITECH, state privacy laws, and corporate data security standards
Experience advising on or litigating data breach, privacy, or regulatory enforcement matters
Familiarity with NIST, SOC 2, ISO 27001, or similar security frameworks
Strong understanding of emerging technologies, cloud infrastructure, AI, and their legal implications
Bonus Qualifications
IAPP Certified Information Privacy Professional designation (CIPP) or similar
Certified HIPAA Professional (CHP) or equivalent Apply Now 📊 Check your resume score for this job Improve your chances of getting an interview by checking your resume score before you apply. Check Resume Score Similar Jobs Staff Product Marketing Manager, Browser Security – Access 🔥 2 hours ago CrowdStrike 5001 - 10000 🔒 Cybersecurity ☁️ SaaS 🤖 Artificial Intelligence Website LinkedIn All Job Openings Senior Product Marketing Manager at CrowdStrike driving go-to-market strategy for browser security. Overseeing messaging, product launches, and cross-functional collaboration. 🇺🇸 United States – Remote 💵 $145k - $220k / year ⏰ Full Time 🔴 Lead 👮‍♂️ Cybersecurity / Security Engineer 🦅 H1B Visa Sponsor Cyber Security Director of Security, GRC 🔥 6 hours ago Aledade, Inc. 501 - 1000 ⚕️ Healthcare Insurance 🏢 Enterprise Website LinkedIn All Job Openings Director of Governance, Risk & Compliance at Aledade responsible for leading GRC program. Managing a team and ensuring compliance with regulations for patient data protection. 🇺🇸 United States – Remote ⏰ Full Time 🔴 Lead 👮‍♂️ Cybersecurity / Security Engineer Program Manager – Marketplace Security and Privacy Support 🔥 14 hours ago Precise Software Solutions, Inc. 51 - 200 🏛️ Government 🤖 Artificial Intelligence 🤝 B2B Website LinkedIn All Job Openings Program Manager overseeing security and privacy support for Marketplace at CMS. Ensuring governance and delivery of contract-wide outcomes. 🇺🇸 United States – Remote ⏰ Full Time 🟠 Senior 🔴 Lead 👮‍♂️ Cybersecurity / Security Engineer Cyber Security PMP Security Architect 🔥 14 hours ago Precise Software Solutions, Inc. 51 - 200 🏛️ Government 🤖 Artificial Intelligence 🤝 B2B Website LinkedIn All Job Openings Provide technical strategy and architecture for Marketplace security at Precise Software Solutions. Design reusable security patterns and ensure compliance with federal standards. 🇺🇸 United States – Remote ⏰ Full Time 🟠 Senior 🔴 Lead 👮‍♂️ Cybersecurity / Security Engineer Cloud Cyber Security Director of IT – Security 🔥 15 hours ago Ad Hoc LLC 501 - 1000 🏛️ Government 🤖 Artificial Intelligence 🔌 API Website LinkedIn All Job Openings Director of IT and Security at Ad Hoc leading IT strategy and security operations. Empowering organizations to deliver impactful digital services with a focus on government transformation. 🇺🇸 United States – Remote 💵 $160k - $180k / year ⏰ Full Time 🔴 Lead 👮‍♂️ Cybersecurity / Security Engineer View More Security Engineer Jobs 🌐 Worldwide Built by Lior Neu-ner. I'd love to hear your feedback — Get in touch via DM or support@remoterocketship.com Search Search Jobs by country Search jobs by city Search jobs by job title Search entry-level jobs Search junior-level jobs Search senior-level jobs Search jobs by tech stack Search jobs by contract type Search remote internships Search remote part-time jobs Remote jobs Anywhere in the World Companies Hiring Anywhere in the World Companies Hiring Sales People Anywhere in the World Companies Hiring Software Engineers Anywhere in the World Resources Advice Tips for finding remote jobs Interview questions and answers Resume examples Cover letter examples Post a job Affiliates Privacy policy Terms of service Job board SEO course AI Apply Copilot OpenClaw job finder Jobs by Country Remote jobs anywhere in the world (Worldwide remote jobs) Remote jobs United States Remote jobs Australia Remote jobs Brazil Remote jobs Canada Remote jobs France Remote jobs Ireland Remote jobs Germany Remote jobs Netherlands Remote jobs Spain Remote jobs UK Popular Jobs Remote data analyst jobs Remote customer support jobs Remote executive assistant jobs Remote marketing jobs Remote product designer jobs Remote product manager jobs Remote project manager jobs Remote recruiter jobs Remote sales jobs Remote software engineer jobs Jobs by Type Remote full-time jobs Remote part-time jobs Remote contract jobs Remote internship jobs Remote entry-level jobs Remote jobs with no experience required Remote junior jobs (1-3 years of experience) Digital nomad jobs Remote jobs with no degree required Freelance remote jobs Temporary remote jobs Remote jobs hiring now Stay at home mom jobs

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

data governancedata privacycybersecurityHIPAAdata breachregulatory enforcementNISTSOC 2ISO 27001cloud infrastructure

Soft Skills

strategic thinkingoperational supportadvisory skillsrelationship managementeducational skillsorganizational skillscommunication skillsleadershiprisk assessmentincident response

Certifications

J.D.active bar membershipIAPP Certified Information Privacy Professional (CIPP)Certified HIPAA Professional (CHP)