Sr Director of Compliance at SimplePractice
United States
$214.651k - $268.314k
<h4><span style="color: #000000;">About Us</span></h4> <p><span style="color: #000000;">At SimplePractice, we are improving access to quality care by equipping health and wellness clinicians with all the tools they need to thrive in private practice. </span></p> <p><span style="color: #000000;">More than 250,000 providers trust SimplePractice to build their business through our industry-leading software with powerful tools that simplify every part of practice management. From admin work to clinical care, our suite of innovative solutions work together to reduce administrative burden—empowering solo and small group practitioners to thrive alongside their clients. </span></p> <p><span style="color: #000000;">Award-winning and people-first, SimplePractice is shaping the future of health tech. In 2026, we were recognized by BuiltIn as a Best Remote Company to Work For, Software Guru's Best Places to Code, Becker Healthcare Telehealth Companies to Know, and we won a MedTech Breakthrough Award for Best Practice Management Solution Provider.</span></p> <h4><span style="color: #000000;">The Role</span></h4> <p><span style="color: #000000;">We're hiring a Senior Director of Compliance to own our regulatory compliance program end to end — the person accountable for making sure we handle protected health information, and the businesses that depend on us, the way the law and our customers expect.</span></p> <p><span style="color: #000000;">You'll report to the Chief Legal Counsel and work in close partnership with our CISO and Product/Engineering leadership. This is a strategy and program-ownership role: you'll set direction and represent our compliance posture to the executive team, while a team of managers and analysts runs the day-to-day operations you design.</span></p> <h4><span style="color: #000000;">Responsibilities</span></h4> <p><span style="color: #000000;">Program strategy & governance</span></p> <ul> <li> <p><span style="color: #000000;">Define the compliance program, set the compliance program's roadmap, priorities, and risk appetite; own risk assessments and the compliance risk register and hold risk-acceptance authority up to a defined threshold, escalating above it to the CLO.</span></p> </li> <li> <p><span style="color: #000000;">Chair a cross-functional Compliance/Privacy/Security steering group with Legal, Security, and Product.</span></p> </li> </ul> <p><span style="color: #000000;">Regulatory implementation</span></p> <ul> <li> <p><span style="color: #000000;">Convert legal interpretation of HIPAA, state health-data privacy laws, 42 CFR Part 2, AI laws and other applicable regimes as they evolve into internal policy, control requirements, and product specifications.</span></p> </li> <li> <p><span style="color: #000000;">Own the compliance policy library: approval authority, review cadence, and mapping policies to the controls they satisfy.</span></p> </li> </ul> <p><span style="color: #000000;">Product & risk</span></p> <ul> <li> <p><span style="color: #000000;">Sit in product planning and governance for regulated feature areas, surface risk and work with Legal on regulatory readiness before launch of higher-risk features.</span></p> </li> <li> <p><span style="color: #000000;">Own the vendor risk program- set the risk-tiering methodology and BAA standards for the vendor risk program; personally review and sign off on high-risk or critical vendors.</span></p> </li> </ul> <p><span style="color: #000000;">Audits, incidents & investigations</span></p> <ul> <li> <p><span style="color: #000000;">Own certification and audit strategy: annual audits for existing certifications, what to pursue and when, and stand behind the resulting posture with customers and the board, while a GRC manager runs fieldwork and evidence collection.</span></p> </li> <li> <p><span style="color: #000000;">Coordinate the business side of regulatory examinations, audits, and subpoenas alongside Legal, which retains control of legal strategy.</span></p> </li> </ul> <p><span style="color: #000000;">Culture & reporting</span></p> <ul> <li> <p><span style="color: #000000;">Own the content and cadence of company-wide compliance training and set the standards and escalation tiers for internal compliance advisory.</span></p> </li> <li> <p><span style="color: #000000;">Deliver a biannual compliance program report to the CLO, CEO, and board Audit/Risk Committee covering risk posture, open remediation, and the risk horizon.</span></p> </li> </ul> <h4><span style="color: #000000;">Required Skills and Experience</span></h4> <ul> <li> <p><span style="color: #000000;">15+ years of experience in healthcare regulatory compliance, risk, or GRC, including at least 7 years leading a compliance program or function.</span></p> </li> <li> <p><span style="color: #000000;">Experience on both sides of the table — inside a covered entity (health system, practice group, or payer) and inside a health-tech/SaaS vendor operating as a business associate.</span></p> </li> <li> <p><span style="color: #000000;">Deep working knowledge of HIPAA (Privacy, Security, Breach Notification, and Enforcement Rules), state comprehensive and health-specific consumer privacy laws, and 42 CFR Part 2.</span></p> </li> <li> <p><span style="color: #000000;">Have personally led an organization through a real regulatory event — an OCR investigation, a state AG inquiry, a reportable breach, or a certification remediation against a hard deadline.</span></p> </li> <li> <p><span style="color: #000000;">Experience shipping compliance requirements into a live product roadmap inside an agile/SaaS environment.</span></p> </li> <li> <p><span style="color: #000000;">Track record building and managing a compliance team and owning a budget.</span></p> </li> <li> <p><span style="color: #000000;">Certified in Healthcare Compliance (CHC), or willingness to obtain within the first year.</span></p> </li> <li> <p><span style="color: #000000;">Executive presence: able to present risk in business terms to a CEO or CLO.</span></p> </li> </ul> <h4><span style="color: #000000;">Bonus Points</span></h4> <ul> <li> <p><span style="color: #000000;">CHPC or CIPP/US.</span></p> </li> <li> <p><span style="color: #000000;">Working familiarity with HITRUST, SOC 2, ISO 27001, or PCI DSS sufficient to direct audit strategy.</span></p> </li> <li> <p><span style="color: #000000;">Experience with behavioral/mental health-specific compliance requirements.</span></p> </li> <li> <p><span style="color: #000000;">JD or health-law background (not required, and not a substitute for operating experience — this is not a legal role).</span></p> </li> <li> <p><span style="color: #000000;">Familiarity with ONC Health IT Certification and information-blocking rules.</span></p> </li> </ul> <h4><span style="color: #000000;">Benefits</span></h4> <p><span style="color: #000000;">We offer a competitive benefits program including:</span></p> <ul> <li style="color: #000000 !important;"><span style="color: #000000;">Medical, dental, vision, life & disability insurance</span></li> <li style="color: #000000 !important;"><span style="color: #000000;">401(k) plan with company match </span></li> <li style="color: #000000 !important;"><span style="color: #000000;">Flexible Time Off (FTO), wellbeing days, paid holidays, and summer Fridays</span></li> <li style="color: #000000 !important;"><span style="color: #000000;">Mental health resources</span></li> <li style="color: #000000 !important;"><span style="color: #000000;">Paid parental leave & Backup Care</span></li> <li style="color: #000000 !important;"><span style="color: #000000;">Tuition reimbursement</span></li> <li style="color: #000000 !important;"><span style="color: #000000;">Employee Resource Groups (ERGs)</span></li> </ul> <p><span style="color: #000000;"><strong>California Job Applicant Privacy Notice</strong></span></p> <p><span style="color: #000000;">Thank you for your interest in opportunities at SimplePractice LLC (“SimplePractice” or “us” or “we” or “our”). Please note that when you submit your resume or application materials to us for employment purposes, you are subject to the </span><a href="https://www.simplepractice.com/california-applicant-notice/" target="_blank"><span style="color: #000000;"><u>SimplePractice California Job Applicant Privacy Notice</u></span></a><span style="color: #000000;">. </span></p> <p><span style="color: #000000;">For more information about our privacy practices, please contact us at <u>privacy@simplepractice.com</u>.</span></p> <p><span style="color: #000000;"><strong>Notice to Candidates</strong></span></p> <p><span style="color: #000000;">SimplePractice has been made aware of fraudulent job postings and unaffiliated third parties posing as our recruiting team. We do not have any affiliation or connection to these situations and only post open roles on our official Careers page (</span><a href="http://simplepractice.com/careers" target="_blank"><span style="color: #000000;"><u>simplepractice.com/careers</u></span></a><span style="color: #000000;">) and reputable job boards like our official LinkedIn or Indeed pages. </span></p> <p><span style="color: #000000;">All official SimplePractice recruitment emails will be sent from the domains @simplepractice.com, no-reply@greenhouse.io or no‑reply@linkedin.com email addresses. </span></p> <p><span style="color: #000000;">Examples of fraudulent domains include careers-simplepractice.com, simplepractices.com, and simplepractice.careers.</span></p> <p><span style="color: #000000;">Please note that SimplePractice will never ask candidates or new hires for money or payment of any kind at any stage of the recruitment or onboarding process.</span></p> <p><br><br><br></p><div class="content-pay-transparency"><div class="pay-input"><div class="description"><hr> <p>Base salary is one component of total compensation. Employees may also be eligible for an annual bonus or commission. Some roles may also be eligible for overtime pay.</p> <p>The amount below represents the expected annual base compensation range for this job requisition. Ultimately, in determining your pay, we’ll consider many factors including, but not limited to, skills, experience, qualifications, geographic location, and other job-related factors.</p></div><div class="title">Base Compensation Range</div><div class="pay-range"><span>$214,651</span><span class="divider">—</span><span>$268,314 USD</span></div></div></div>
Apply Now
