Headway
Privacy Manager
$122K–$190K
Remote · Remote · Manager · Full-time · Posted Sep 1, 2026
- Experience
- 4–7 years of U.S. privacy experience in a regulated industry.
About the job
Own and improve Headway’s privacy operations, handling privacy requests and incidents and assessing product, AI, and vendor risks involving health and other sensitive data.
What you'll do
- Maintain privacy policies, controls, records, training, and operational metrics across applicable requirements.
- Manage individual rights requests and support privacy incident investigations, corrective actions, and required notifications.
- Assess product, AI, and vendor privacy risks, including vendor diligence and BAA governance.
What they ask for
- 4–7 years of U.S. privacy experience in a regulated industry.
- Hands-on experience in at least two areas: privacy incidents, individual rights or DSAR workflows, privacy assessments, vendor and BAA governance, or privacy training.
- Ability to translate legal and regulatory requirements into actionable guidance and exercise sound judgment about escalation.
- Fluency with AI tools and ability to evaluate AI use cases involving patient data, with care in handling regulated data.
Nice to have
- Direct HIPAA experience is strongly preferred.
- Experience with 42 CFR Part 2, heightened-confidentiality regimes, payer or contractual requirements, SaaS/cloud/AI product risk, or relevant privacy or AI governance certifications.
Pay
$121.6K – $190K (base salary; currency not stated)
Tools
HIPAA, 42 CFR Part 2, AI, machine-learning, SaaS, cloud, CIPP/US, CIPM
AI focus
Partner with the AI Governance Program to assess AI and machine-learning use cases, including data use, minimum necessary access, retention, transparency, human oversight, and patient-data risks.
Model-written summary · the original posting is authoritative