Healthcare Privacy & Compliance Specialist

About this role Transcarent is seeking a Healthcare Privacy & Compliance Specialist with deep expertise in privacy regulations and health care compliance to support our rapidly expanding digital health and clinical services ecosystem. This role will play a critical part in ensuring Transcarent’s solutions, workflows, and partnerships meet all applicable regulatory requirements, including HIPAA, HITECH, CMS, OCR, and state privacy laws. The ideal candidate is detail-oriented, proactive, and passionate about supporting a member-first experience while maintaining robust compliance safeguards. What you’ll do Champion Privacy & Data Protection Support our Privacy Program with practical, easy-to-understand guidance grounded in HIPAA, HITECH, CCPA/CPRA and other state data privacy laws, GDPR (as applicable), and emerging privacy requirements. Review new products, features, data flows, and vendor relationships through a privacy lens—conducting Privacy Impact Assessments and recommending meaningful safeguards. Own and manage the Privacy email inbox, triaging incoming questions, identifying whether they relate to HIPAA, state data privacy laws, or other issues, and responding to inquiries and escalating complex or high-risk questions to the Privacy Officer. Assist with privacy and data incident investigations, helping gather facts, document findings, and coordinate follow-up actions under the direction of the Privacy Officer. Support Healthcare Compliance Excellence Support the Privacy Officer, Compliance Officer, and broader Legal & Compliance team with day-to-day healthcare compliance activities across digital health, virtual care, pharmacy, and surgical care services. Stay on top of regulatory changes that affect digital health, virtual care, pharmacy, and surgical care services. Assist with CMS, OCR, OIG, and state-level requirements to ensure our operations and clinical programs remain compliant. Prepare and support internal and external audits, pulling together documentation and helping implement corrective actions. Build Simple, Scalable Compliance Infrastructure Draft and update policies, SOPs, playbooks, training decks, and other operational resources that help teams understand what’s required—and why it matters. Design and implement a clear, end-to-end process to manage data subject requests (both HIPAA individual rights and state privacy rights) that is owned operationally by business teams, including intake, triage rules, workflows, SLAs, templates, and documentation—plus defined escalation paths to you and the Privacy Officer. Organize compliance documentation and support risk assessments, dashboards, and reporting that keep leadership informed. Use tools such as OneTrust and ticketing/case-management systems to define standards for how requests are tracked, monitored against SLAs, and reported to leadership, and to perform periodic quality checks. Support compliance and privacy incident investigations with clear thinking, thorough documentation, and timely follow-through. Partner Across the Organization Offer practical, accessible guidance to teams across Transcarent—Product, Clinical, Engineering, Security, Operations, People, and more. Help teams operationalize compliance requirements in ways that support innovation while earning Member trust and meeting regulatory obligations. What we’re looking for - Must have skills 3–5+ years of experience in privacy or healthcare compliance roles, ideally in digital health, health tech, telehealth, and/or payer/provider environments. Strong working knowledge of HIPAA, HITECH, and U.S. privacy laws. Ability to translate complex rules into clear, actionable guidance. Exceptional attention to detail and comfort navigating ambiguity. Collaborative communication style with a commitment to integrity, confidentiality, and member-first thinking. Nice to have Certifications such as CHPC, CHC, CIPP/US, or CIPM. Experience supporting audits, accreditation, or compliance program development. Fa