Data Privacy Engineer

Data Privacy Engineer ABOUT OPENLOOP OpenLoop was co-founded by CEO, Dr. Jon Lensing, and COO, Christian Williams, with the vision to bring care anywhere. Our telehealth support solutions are thoughtfully designed to streamline and simplify go-to-market care delivery for companies offering meaningful virtual support to patients across an expansive array of specialties, in all 50 states. ABOUT THE ROLE OpenLoop’s mission is to bring care anywhere by powering telehealth solutions at scale. Our security team is seeking a Data Privacy Engineer to implement companywide privacy-by-design principles and processes. This role partners closely with security and legal teams to safeguard personal data and ensure lawful, ethical use while supporting the company’s expanding product, technology, and AI initiatives. The ideal candidate brings cross-functional experience across privacy, security, product, and emerging technologies. WHAT YOU’LL DO: - Lead HIPAA Privacy rule implementation projects. Provide subject matter expertise on HIPAA Security rule implementation. - Help lead implementation of Company’s Privacy by Design program, conduct privacy impact assessments and reviews of products and processes impacting personal information. - Contribute to development and update of Privacy policies, procedures, and guidelines, as well as the processes that implement them. - Review and develop reports to assess the effectiveness of privacy policies and processes. - Coordinate with business units on expansion of tooling and improvement of privacy controls that impact data privacy. - Assist in the development and execution of the Company privacy program roadmap, including privacy risk assessments. - Provide oversight for the privacy components of Company’s data mapping, minimization, inventory processes. - Contribute to AI governance efforts, ensuring privacy requirements are met across all AI technologies. - Govern patient rights processes under HIPAA and Data Subject Access Rights process as necessary under state law. - Assist in building privacy requirements into the Vendor onboarding process, and conduct privacy review of vendors. - Assist in incident response, including conducting four factor HIPAA analysis, state law analysis as necessary, and monitoring mitigation and remediation activities to completion. - Other duties as assigned WHO YOU ARE REQUIRED - Bachelor’s or Master’s in Information Security, Engineering, or a related field. - 5 years of experience in privacy engineering, privacy operations, governance or data management. - Strong understanding of privacy regulations, including HIPAA’s Privacy and Security Rules. - Excellent communication and relationship skills. - Ability to apply privacy expertise to Company products and services to improve privacy strength and measure impact. - Can identify and drive solutions for privacy issues that have a positive impact on risk reduction or business enablement. - Strong knowledge of data governance frameworks, quality, and compliance standards. - Experience automating Privacy Impact Assessment workflows. - Strong analytical and problem-solving skills with attention to detail. - Strong understanding of state privacy laws, GDPR, and other global privacy laws. - Hands-on experience working with privacy risk assessment tools and frameworks. - Skilled in risk identification, assessment, and mitigation. PREFERRED - Project management experience with the ability to coordinate working groups and timelines is a plus. - Experience with translating legal requirements into technical workflows. - Preferred certifications: CISSP-Privacy, CDPSE (ISACA), IAPP, NIST Privacy Framework training   OUR BENEFITS In addition, for salaried positions you would also be eligible for: - Medical, Dental, and Vision plans - Flexible Spending/Health Savings Accounts - Flexible PTO - 401(k) + Company Match - Life Insurance, Pet insurance, and more OUR COMPANY We have a relatively fl ... (truncated, view full listing at source)