Compliance Manager

Compliance Manager Beware of Phishing Attempts: We've noticed an increase in phishing where fraudsters impersonate employees and send fake job offers to steal sensitive information. We'll never ask for financial details during the hiring process and only use "@hingehealth.com http://hingehealth.com" emails. If you receive a suspicious offer, stop communication and report it to the US FBI Internet Crime Complaint Center. To verify an email from our recruiting team, forward it to security@hingehealth.com. The Opportunity Join the team ensuring our mission to transform musculoskeletal care is built on a foundation of integrity and uncompromising ethical standards. As a Compliance Manager, you will do more than conduct audits; you will help build and maintain the scalable compliance "engine" that powers our ability to confidently navigate the complex digital health landscape. You will serve as a strategic bridge between evolving healthcare regulations and our fast-moving business teams—ensuring that as we innovate, we remain a trusted partner to our clients and members. What You'll Accomplish - In your first 3 months: You will coordinate with Commercial Legal to provide compliance guidance on new products, services, and business initiatives to Marketing, Product, R&D, and Engineering teams to enable business agility while managing risk. You will take ownership of key compliance frameworks and lead the refresh of core policies while responding to inquiries and ethics matters reported via internal channels. - In your first 6 months: You will drive internal auditing and monitoring activities, ensuring effective corrective actions are implemented. You will lead the review of external-facing marketing materials for compliance with FTC guidelines and truth-in-advertising laws. You will partner with Privacy Counsel to implement privacy program responsibilities (HIPAA, GDPR, and CCPA). - In your first year: You will manage government contracts compliance, including adherence to CMS regulations, Federal Acquisition Regulations (FAR), and FEHBAR requirements. You will review new vendor contracts for regulatory flow-down requirements and oversee attestations for downstream entities. You will incorporate emerging state and federal healthcare issues to support new product launches and business growth. Who You Are - A "Learn-it-all": You possess deep knowledge of healthcare fraud, abuse laws, and privacy regulations (HIPAA, FTC) but are always eager to deepen your expertise. You stay ahead of industry trends—like AI governance and digital health regulations—and proactively research new concepts to support the business. - A Business Enabler: You don’t just identify risks; you solve for them. You have a knack for translating complex regulatory requirements into practical, "business-friendly" advice that enables our business to move fast without breaking things. - A Process Architect: You don’t just follow the process; you improve it. You have the "Hustle" to spot inefficiencies in workflows and implement scalable enhancements, ensuring our compliance program grows as fast as our member base. Basic Qualifications - Bachelor's degree from an accredited college or university. - 6+ years of relevant professional experience, with at least 3+ years in a compliance role at a digital health, health technology, or medical device company. - Certification in Healthcare Compliance (CHC) or Privacy (CIPP/US). - Deep knowledge of healthcare fraud, waste, and abuse laws (Anti-Kickback Statute, False Claims Act) and privacy/consumer protection laws (FTC). - Experience reviewing and approving marketing materials in a regulated industry. - Demonstrated experience with federal healthcare programs (Medicare/Medicaid) and government contracting compliance. - Ability to translate complex regulatory requirements into practical, business-friendly advice. - Experience conducting and managing audits, monitoring, and internal investigations. Preferred Q ... (truncated, view full listing at source)