Privacy Manager

A hands-on privacy manager at Headway, the mental health care company, reporting to the Director of Privacy/Privacy Officer and running core privacy operations under HIPAA, 42 CFR Part 2 and state privacy laws. The work covers keeping policies, data maps and processing records current, handling patient rights requests within legal deadlines, supporting incident investigations and breach notifications, assessing products, vendors and AI use cases that touch health data, maintaining the BAA inventory, tracking privacy metrics and building training.

Headway wants four to seven years of US privacy work in a regulated field such as healthcare or financial services, ideally with direct HIPAA experience, hands-on depth in at least two of incidents, rights requests, assessments, vendor governance or training, and good judgement on when to escalate to legal. CIPP/US, CIPM or CHPC is a plus.