Privacy Manager (Remote)

We believe that mental health is just as important as physical health. We recognize that mental health issues can be complex and multifaceted, and we are dedicated to treating the whole person, not just the symptoms. We aim to create a world where mental health is no longer stigmatized or marginalized, but rather is embraced as an integral part of one's overall well-being.  We believe that by providing quality care that is both evidence-based and compassionate, we can empower individuals to take charge of their mental health and achieve their full potential. We are passionate about making a positive impact on the lives of those struggling with mental health issues and we strive to be a force for positive change in the field of mental healthcare. Rula is a remote-first company. We currently hire in most U.S. states, with the exception of Hawaii.

We are seeking a Privacy Manager to enable Rula's Legal and Compliance team through daily operational oversight of our healthcare privacy and AI compliance programs. Reporting to the Director of Privacy, this person will be responsible for conducting privacy impact assessments, executing incident triage and investigations, and ensuring vendor practices respect patient data. This person will apply practical knowledge of HIPAA, state health privacy laws, and emerging digital health practices to help us scale safely. You will be a crucial partner to our product, engineering, and clinical teams, translating complex regulatory requirements into clear, executable workflows that protect our community while supporting fast-paced innovation Required Qualifications 5+ years of professional compliance and data privacy experience, including at least 2-3 years focused specifically within a healthcare environment subject to HIPAA/HITECH regulations Hands-on experience executing Privacy Impact Assessments (PIAs) and managing the full lifecycle of a privacy incident or breach, from intake through investigation Strong working knowledge of HIPAA, HITECH, and state-level medical privacy regulations Proven track record collaborating with Information Security or IT teams on risk tracking and security incident review Experience building or improving privacy operational processes, controls, or governance mechanisms within a healthcare setting Preferred Qualifications While having the preferred qualifications enhances your candidacy, having all of them is not mandatory. We encourage all interested applicants to apply, even those who may not meet every preferred requirement. Experience in a high-growth digital health, health tech, or telehealth company Professional privacy certifications such as CIPP/US, CIPM, or CHPC Exposure to or basic experience evaluating the privacy implications of AI/ML models or automated clinical workflows Experience building dashboards or operational reporting Experience working with modern SaaS, cloud, or AI-enabled healthcare and/or productivity products Experience developing or delivering privacy training and awareness We're serious about your well-being! As part of our team, full-time employees receive: 100% remote work environment: Working hours to support a healthy work-life balance, ensuring you can meet both professional and personal commitments (must be based in United States, currently not hiring in Hawaii) Attractive pay and benefits : Full transparency of pay ranges regardless of where you live in the United States Comprehensive health benefits : Medical, dental, vision, life, disability, and FSA/HSA 401(k) plan access : Start saving for your future Generous time-off policies : Including 2 company-wide shutdown weeks each year for self-care (for most employees) Paid parental leave : Available for all parents, including birthing, non-birthing, adopting, and fostering Employee Assistance Program (EAP) : Supporting your mental and physical health Quarterly department stipend : Fun team-building activities or in-person gatherings Community and employee