{"id":240356,"url":"https://alion.io/job/headway-privacy-manager","title":"Privacy Manager","company":{"id":3828,"name":"Headway","domain":"headway.co","url":"https://alion.io/company/headway","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":77,"open_postings":18,"ghost_share":0.056,"stale_share":0.722,"repost_share":0.111,"time_to_fill_p50_days":56,"computed_at":"2026-11-07T05:47:08Z"}},"role":"Legal","role_family":"Legal","seniority":null,"employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":121600,"max":190000,"currency":"USD","period":"year","gross":null,"usd_annual":190000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"HIPAA","optional":false}],"status":"live","first_seen_at":"2026-09-01T22:35:07Z","employer_posted_date":"2026-09-01","last_verified_at":"2026-11-07T12:08:38Z","board_verified":true,"closed_at":null,"days_open":66,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":66},"description":"1 in 4 people in the US have a treatable mental health condition, but most providers don't accept insurance, making therapy too expensive for most people. Headway’s mission is to fix this by building a new mental healthcare system everyone can access. We started by solving the biggest barrier to care: insurance. The admin work - credentialing, claims, payment reconciliation - is a nightmare. We've automated that.\nBut we're going further. Over 90,000 providers across all 50 states run their practice on our software, serving over 2.6 million patients. We are building the best tools for therapists to run their entire practice, reimagining the experience of finding a therapist, and investing in the platform foundations to enable this at scale, and building much of it with AI. We aren't just a billing layer; we are becoming the platform where care actually happens.\nWe're a Series D company with $325M+ in funding (a16z, Accel, Spark Capital, etc.), looking for exceptional people to help us achieve this mission. We want your time here to be the most meaningful experience of your career. Join us, and help change mental healthcare for the better.\nThe Privacy Manager is a hands-on member of Headway’s Privacy team, reporting to the Director of Privacy/Privacy Officer. You will partner closely with Legal, Security, Clinical, Product, and Operations to strengthen the privacy practices that support Headway’s growth and earn the trust of patients and providers.\nYou will own core privacy operations across HIPAA, state privacy laws, behavioral health confidentiality, individual rights, vendor governance, and the responsible use of AI. Success in this role means building processes that work in practice: assessments are completed, incidents are investigated, rights requests meet statutory deadlines, and privacy risks are addressed.\nYou will\nOperate and improve the privacy program\nMaintain policies, procedures, and controls supporting HIPAA, 42 CFR Part 2, state privacy laws, and other applicable requirements.\n\nKeep privacy controls, data maps, and records of processing current, with clear owners, evidence, and testing schedules.\n\nTrack privacy risks and operational metrics, including request volume, aging items, and remediation progress.\n\nTranslate regulatory, payer, and contractual requirements into practical guidance for teams across Headway.\n\nDevelop privacy training and resources that help employees make sound decisions.\n\nManage privacy requests and incidents\nTriage privacy inquiries, individual rights requests, and potential incidents.\n\nManage HIPAA and state privacy rights workflows, including access, amendment, accounting of disclosures, restriction, confidential communications, and deletion.\n\nSupport incident investigations, documentation, root-cause analysis, and corrective actions.\n\nCoordinate the evidence, timelines, and logistics required for notification and regulatory submissions.\n\nAssess product, AI, and vendor risk\nConduct privacy assessments for products, vendors, workflows, and initiatives involving PHI or sensitive personal information.\n\nPartner with the AI Governance Program to evaluate AI and machine-learning use cases for appropriate data use, minimum necessary access, retention, transparency, and human oversight.\n\nConduct privacy diligence on vendors with Legal and Security, maintain the BAA inventory, and drive identified gaps to resolution.\n\nBuild practical checklists and playbooks that make privacy reviews consistent and scalable.\n\nYou have\n4-7 years of U.S. privacy experience in a regulated industry such as healthcare, health technology, health plans, or financial services. Direct HIPAA experience is strongly preferred.\n\nHands-on experience in at least two of the following areas: privacy incidents, individual rights or DSAR workflows, privacy assessments, vendor and BAA governance, or privacy training.\n\nThe ability to translate complex legal and regulatory requirements into clear, actionable guidance for non-experts.\n\nStrong judgment about which privacy decisions you can own and which legal questions require escalation.\n\nExcellent written and verbal communication skills, including the ability to document decisions clearly and influence cross-functional partners.\n\nComfort balancing day-to-day execution with longer-term program design and improvement.\n\nFluency with AI tools for research, drafting, and analysis, along with sound judgment about verification and the handling of PHI and other regulated data.\n\nThe ability to evaluate AI use cases involving patient data, including situations where the law is still evolving.\n\nA collaborative, pragmatic approach to ambiguity and pushback, with a preference for scalable processes over one-off solutions.\n\nA strong connection to Headway’s mission of expanding access to mental healthcare.\n\nNice to have\nExperience with 42 CFR Part 2, minor consent and confidentiality requirements, or other heightened-confidentiality regimes.\n\nFamiliarity with payer or contractual privacy requirements.\n\nExperience assessing privacy risk in SaaS, cloud, or AI-enabled products.\n\nA relevant certification, such as CIPP/US, CIPM, CIPT, CHPC, CHPS, or an AI governance credential.\n\nWe believe a team's strength is in its people, and we cannot achieve this mission without a team that reflects the diversity of this problem - across race, ethnicity, gender, sexuality, age, national origin, religion, family status, disability, military status, and experience. Headway is committed to the full inclusion of all qualified individuals. As part of this commitment, Headway will ensure that persons with disabilities are provided with reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or receive other benefits and privileges of employment, please inform the recruiter when they contact you to schedule your interview.\nHeadway participates in E-Verify. To learn more, click here.\nA notice to Headway applicants: To protect yourself against phishing and recruitment fraud, please note that Headway only accepts applications through our official careers page at https://headway.co/careers. Headway will never refer you to external websites, ask for payment or personal information, or conduct interviews via messaging apps. All official communication will come from a @ findheadway.com email address. If you are contacted by someone claiming to be from Headway via an unofficial channel, please do not share any information and report it as spam.","description_format":"text","description_chars":6570,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Psychotherapy & Counseling","Digital Mental Health"],"lifecycle":[{"event":"open","at":"2026-09-05T10:25:50Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 34","filings_12m":34,"filings_prev_12m":32,"green_card_filings_12m":0,"median_offered_wage_usd":157500,"route":null,"cap_exempt":false,"checked_at":"2026-11-07T07:57:00+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":25,"band":"fade","label":"Fading","p_open":1,"p_active":0.563,"p_room":0.44,"age_days":66,"expected_fill_days":56,"reasons":["conf:1","stale_co","velocity","win:tail","crowd:"],"computed_at":"2026-11-07T05:47:08Z"},"pay":{"stated_usd_annual":190000,"is_top_pay":true},"html_url":"https://alion.io/job/headway-privacy-manager","json_url":"https://alion.io/job/headway-privacy-manager.json","meta":{"generated_at":"2026-11-07T14:29:59Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":18708,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3828},"rest":"https://alion.io/mcp/rest/get_company?id=3828"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fheadway-privacy-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fheadway-privacy-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fheadway-privacy-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/headway-privacy-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fheadway-privacy-manager"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":240356}},{"tool":"search_jobs","arguments":{"company":"headway.co","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":240356},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}