Compliance Lead

About Fullscript

Fullscript is a leading health technology company dedicated to improving patient care through seamless access to trusted products and clinical tools. Founded in 2011, our platform supports over 125,000 licensed practitioners and connects more than 10 million patients for enhanced healthcare delivery. We develop innovative tools that streamline care, enabling healthcare providers to focus on helping people get better.

Role Overview

As our Compliance Lead, you will play a key role in scaling privacy and data governance across a rapidly expanding health tech platform that serves practitioners and patients throughout North America. You will operate at the nexus of healthcare, artificial intelligence, product development, and regulatory compliance, collaborating closely with cross-functional teams including Product, Engineering, Security, Data, Clinical, and Customer Support. This position suits a professional adept at translating complex regulations into actionable business solutions, with strong influencing skills to support innovation while safeguarding patient trust.

Key Responsibilities

• Collaborate with Product and Engineering teams to embed privacy-by-design principles into new features, systems, and user workflows from inception.
• Lead privacy evaluations of AI-driven features and vendor integrations, encompassing controls on model training, protected health information usage, transparency requirements, and governance checkpoints prior to launch.
• Support clinical research and outcomes measurement initiatives, ensuring secondary data usage complies with documented data governance standards.
• Provide timely, written guidance for urgent product and commercial privacy requests.
• Manage daily privacy operations in partnership with the Senior Director of Compliance, executing assigned responsibilities independently.
• Administer Fullscript's OneTrust platform for vendor risk assessments, data inventories, privacy impact assessments, consumer rights requests, and scaling workflows.
• Lead privacy incident response processes including intake, triage, stakeholder coordination, documentation, and remediation tracking through resolution.
• Develop trusted relationships across business units to integrate privacy considerations early in project lifecycles.
• Interpret HIPAA, PIPEDA, Quebec Law 25, CPRA, and other relevant U.S. state privacy regulations into clear, practical guidance, policies, and training materials.
• Continuously monitor Fullscript's privacy posture, proactively identifying emerging risks and escalating them to senior compliance leadership.

Qualifications

• A minimum of 7 years of focused, hands-on experience in privacy compliance roles requiring extensive cross-team collaboration.
• Demonstrated success partnering with Product and Engineering teams to integrate data protection and privacy safeguards into products and technical architectures.
• Direct expertise in the U.S. healthcare regulatory environment, specifically HIPAA compliance.
• Proven experience managing and operating within OneTrust privacy management software.
• Comprehensive knowledge of privacy laws and regulations across the United States and Canada, with the ability to confidently apply them in a business context.
• Foundational understanding of the privacy implications related to artificial intelligence technologies.
• Exceptional interpersonal skills for building effective working relationships and communicating compliance concepts clearly and pragmatically.
• A highly autonomous, solution-driven approach thriving in fast-paced growth environments.

Additional Information

Fullscript fosters a supportive and inclusive workplace where collaboration and impact drive success. We prioritize curiosity, teamwork, and personal growth while putting people first. Applicants should apply directly through appropriate channels. Due to high volumes, we cannot respond to status inquiries, but will reach out if there is alignment. Accommodation requests for applicants are welcomed to support an equitable hiring process.

Offers are contingent on background checks adhering to applicable laws. Artificial intelligence tools may be utilized for hiring assistance; however, final decisions are made by humans ensuring compliance with privacy and employment regulations.

Salary data shared is for base pay transparency and excludes stock options, wellness stipends, or other benefits which are part of Fullscript's overall compensation package.