Back to jobs
tags.new

Compliance and Privacy Manager

United States

About Boulder

Boulder Care is an award-winning digital clinic for addiction medicine, recognized for both innovation and high quality of patient care. Founded in 2017 by CEO Stephanie Strong, our mission is to improve the lives of people with substance use disorders through compassionate, evidence-based care.

We provide Boulder patients with a fully virtual, multidisciplinary care team—including medical providers, behavioral health clinicians, and peer recovery specialists—who deliver personalized treatment, including medication-assisted treatment (MAT) and ongoing support. Our approach is grounded in clinical excellence, patient-centered care, and a commitment to reducing barriers to recovery. Boulder partners with leading health plans, employers, and community organizations to ensure that our services are accessible and covered for the people who need them most.

Named by Fortune as one of the Best Workplaces in Healthcare, Boulder fosters a culture of kindness, respect, and meaningful work that delivers outstanding patient outcomes and moves the addiction medicine industry forward.

About this role

As the Manager of Compliance & Privacy, you'll lead and scale our health care compliance and privacy programs across a rapidly growing, telehealth-based addiction treatment model. You will be responsible for ensuring Boulder Care operates at the highest standards of compliance with health care regulations and privacy laws in every jurisdiction in which we deliver services, including oversight of privacy and compliance operations, state behavioral health certification and accreditation program compliance, internal audits, incident responses, managing education and training initiatives, and monitoring and mitigating risk. In this role, you will partner closely with legal, clinical, IT, product, operations, and executive leadership to embed compliance and privacy into our services, policies, and culture. 

Health Care Compliance, Accreditation and Behavioral Health Certification, and Privacy Program Management - 90%

  • Develop, maintain, and enhance compliance policies, procedures, and controls for telehealth-based addiction treatment services in multiple states in accordance with best practices and applicable state and federal laws and regulations; lead periodic reviews and updates as laws/regulations evolve
  • Serve as the designated Privacy Officer and oversee compliance with HIPAA, 42 CFR Part 2, and applicable state privacy laws and regulations
  • Manage national accreditation and state behavioral health certification program compliance, including policy development and new market applications 
  • Conduct privacy & compliance risk assessments, internal audits, gap analyses; implement corrective plans and monitor remediations as necessary
  • Manage incident response: oversee investigations of privacy or compliance breaches, coordinate response, notification, and remediation
  • Lead training & awareness programs for clinical, operational, technical, and other staff on privacy, security, and regulatory compliance topics
  • Monitor regulatory landscape: track changes and developments in relevant laws and regulations, assess their impact on Boulder Care’s operations, and advise leadership accordingly
  • Support compliance with contractual obligations (e.g. with payors, vendors, partners) related to privacy, consent, data use and sharing
  • Serve as liaison to external regulators or auditors, manage audit or investigation responses, ensure documentation readiness
  • Maintain metrics, dashboards, and reporting to leadership on compliance/privacy performance, risk indicators, and program health
  • Lead or participate in internal compliance committees; coordinate with Chief Legal Officer, clinical operations, and information security teams

Ethical Leadership, Compliance and Organizational Communication -10%

  • Demonstrate knowledge of ethical standards, professional codes, and applicable laws affecting the department and company
  • Uphold and model organizational policies and professional codes of ethics; document and escalate reports of unethical behavior as required by Boulder policies, licensing bodies, or legal standards
  • Promote ethical, patient-centered decision-making by engaging in constructive discussions on the impact of work decisions on patients, staff, and stakeholders
  • Communicate policies, procedures, and organizational culture effectively to candidates, new employees, and colleagues
  • Foster a culture of professionalism, transparency, and accountability to ensure consistent compliance across the team

What you bring:

  • Minimum of 4 years of health care compliance, privacy, and risk management experience, with a strong preference for experience in telehealth, behavioral health and/or addiction medicine settings
  • Deep knowledge and proven experience with HIPAA, state privacy laws, and healthcare regulatory compliance in multi-state environments
  • Experience leading incident response, internal audits, policy development, and regulatory-driven investigations
  • Strong leadership skills; ability to manage cross-functional teams, influence without direct authority, and drive culture change
  • Excellent communication skills—written, verbal; able to deliver training, to work with executive leadership and with staff at all levels
  • Strong analytical skills; comfort with interpreting complex regulatory requirements and translating them into practical operational policies
  • High integrity, ethical mindset, attention to detail, ability to maintain composure under pressure

Nice to have but not required: 

  • Knowledge of 42 CFR Part 2
  • Professional certifications (e.g. Certified in Healthcare Compliance (CHC), Certified Healthcare Privacy Compliance (CHPC), or equivalent), or attainable within one year of hire
  • Prior experience scaling compliance/privacy programs in a startup environment

Work environment

  • This is a fully remote role but we are currently only hiring candidates located in the following states: AZ, CO, FL, GA, ID, IL, KY, MA, NC, NJ, NY, OH, OR, PA, SC, TN, TX, UT, WA, or WV. Applicants must reside and work in one of those states to be considered
  • Boulder Care employees are free to use our river-front HQ located in Portland, OR whenever they would like

Expected hours of work

This is a full-time remote position expected to work 40 hours between Monday-Friday 

Compensation

The starting pay range for this position is $110,000 - 135,000 per year; base pay offered may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. The total compensation package for this position may also include other elements, including a full range of medical, financial, and/or other benefits (including 401(k) eligibility and various paid time off benefits, such as vacation, sick time, and parental leave).

Hiring timeline

  • Phone Interview (30min)
  • Hiring Manager Interview (60min)
  • Panel Interview (60min)
    • NOTE: As part of our hiring process, all final candidates will be required to undergo background checks and provide professional references. By applying, you acknowledge and consent to these checks, which may include employment history, criminal records, education/licensing verification, and professional references. We are committed to transparency and confidentiality throughout this process and will inform you in advance should any further information be required.

Some of Boulder’s amazing benefits for regular, full-time employees

  • Contribution to meaningful, life-saving work!
  • Comprehensive medical, dental, vision, and short-term disability benefits designed to take care of our employees and their families 
  • Mental Health Services via Regence, Doctors on Demand, and EAP for continuous care
  • 4 weeks of vacation accrued per calendar year with a tenured increase to 5 weeks at 2 years of employment
  • Sick leave accrued at 1 hr for every 30 hrs paid
  • 9 Paid Holidays per year
  • 12 weeks of 100% paid parental leave for the birth or adoption of a child (after 6 months of employment)
  • 401(k) retirement savings
  • Remote friendly with hardware provided to complete your work duties

Our values

  • The people we care for always come first
  • Our opportunity is also our duty, in service to others
  • Share facts to change minds, instill empathy to change hearts
  • Move the industry forward: follow the data
  • Strong individuals, stronger together

Boulder Care believes the people who manage our product and team should be representative of those who use the platform. This includes people from backgrounds that are historically underrepresented in the industry. We celebrate differences and are committed to equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, citizenship, marital status, disability, gender identity or veteran status. If you are a qualified person with a passion for what we do, please apply!

Apply for this job

*

indicates a required field

Resume/CV*

Accepted file types: pdf, doc, docx, txt, rtf

Due to privacy protocols, we are unable to employ individuals who are or have previously been patients at Boulder Care. If this applies to you, please discontinue this application. *
Select...
Select...
Select...
Select...
Select...

U.S. Standard Demographic Questions

We invite applicants to share their demographic background. If you choose to complete this survey, your responses may be used to identify areas of improvement in our hiring process.
Select...
Select...
Select...
Select...
Select...
Select...

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Boulder Care’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Select...
Select...
Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Select...

Voluntary Self-Identification of Disability

Form CC-305
Page 1 of 1
OMB Control Number 1250-0005
Expires 04/30/2026

Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

  • Alcohol or other substance use disorder (not currently using drugs illegally)
  • Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
  • Blind or low vision
  • Cancer (past or present)
  • Cardiovascular or heart disease
  • Celiac disease
  • Cerebral palsy
  • Deaf or serious difficulty hearing
  • Diabetes
  • Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
  • Epilepsy or other seizure disorder
  • Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
  • Intellectual or developmental disability
  • Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
  • Missing limbs or partially missing limbs
  • Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
  • Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
  • Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
  • Partial or complete paralysis (any cause)
  • Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
  • Short stature (dwarfism)
  • Traumatic brain injury
Select...

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.