Privacy & Compliance Specialist

About the Role

Superpower is looking for a Privacy & Compliance Specialist to lead and manage the entire privacy and compliance program. This key position supports our mission to protect member health data meticulously while scaling operations across all 50 states. The role demands rigorous attention to detail and the capability to implement practical privacy frameworks that facilitate business growth without obstruction. You will oversee how health data from multiple sources such as EMRs, genetic reports, and wearables is handled and ensure compliance with evolving healthcare regulations.

Core Responsibilities

• Develop and maintain a comprehensive privacy program encompassing data mapping, consent management, privacy notices, and handling data subject rights including access, deletion, and correction requests.
• Oversee data collection, storage, processing, and usage across health data platforms like EMRs, health information exchanges, and AI-powered digital tools.
• Conduct privacy impact assessments and integrate privacy-by-design for new products, such as prescription peptides.
• Manage vendor privacy due diligence processes, data processing agreements, and Business Associate Agreements, while maintaining accurate records of data processing and flows.
• Ensure compliance with frameworks like HIPAA Security Rule and SOC 2 by establishing policies, controls, and evidencing remediation efforts.
• Lead security and privacy awareness training and manage the company’s risk register.
• Respond to security questionnaires from customers and partners, assisting with due diligence related to partnerships and fundraising.
• Coordinate incident response and breach assessment in collaboration with Engineering and leadership teams.
• Provide guidance to product and engineering teams on implementing safe, AI-driven clinical recommendations and data usage policies.
• Monitor and interpret state and federal privacy regulations including HIPAA, state-specific health privacy laws, CCPA/CPRA, and FTC health data regulations, translating these into actionable internal policies.

Qualifications and Experience

• Minimum 5 years of hands-on experience managing privacy programs, preferably in healthcare or similarly regulated, data-intensive sectors.
• Proficient knowledge of HIPAA, state health privacy regulations, CCPA/CPRA, and FTC health data rules; familiarity with SOC 2 compliance is advantageous.
• Strong research ability to stay updated on new regulatory obligations.
• Capable of creating scalable compliance systems and anticipating risks to prevent operational delays.
• Good judgment in distinguishing genuine risks from theoretical issues and escalating appropriately.
• Excellent communicator, adept at explaining complex privacy and regulatory concepts clearly to non-experts.
• Comfortable working with ambiguity in a collaborative, high-speed startup environment.
• Self-driven with an ownership attitude, proactively managing responsibilities without constant supervision.
• Deep personal interest in longevity and preventive medicine is preferred.
• Privacy certifications like CIPP/US, CIPM, CIPP/E, or CHPC are valued but not mandatory.
• This position is not a legal counsel role; no JD or bar membership required.

Commitment and Work Environment

• This is a full-time, on-site role based in San Francisco, California.

Why Join Superpower

• Contribute to a mission-driven organization redefining longevity-focused preventive healthcare.
• Take full ownership of building and operating the privacy and compliance function from the ground up.
• Work closely with teams across Operations, Product, Engineering, Growth, and Clinical in a fast-paced, flat organizational structure.
• Be recognized as a key facilitator who enables the company to move swiftly and compliantly.

About Superpower

Superpower is a pioneering health system dedicated to extending and enhancing human life. We have rapidly grown over the last six months by scaling AI-powered healthcare solutions from lab testing and digital twinning to innovative peptide therapies. Backed by leading investors in healthcare and technology, we are preparing for accelerated growth and impact.

Company Values and Culture

• Committed to creating an environment where everyone can do their best work.
• Maintain a very high talent standard, recruiting only top performers.
• Emphasize sustainable work-life balance and prioritize health as a core value.
• Aspire to establish the highest standard for team health culture globally.

Investors and Influencers

• Backed by top-tier investors including Forerunner, 8VC, and Susa Ventures among others.
• Supported and advised by notable figures such as founders of DoorDash, early Uber investors, and major influencers in healthcare and technology.

Additional Information

• We welcome international applicants and provide visa sponsorship.
• Relocation assistance to the United States is available for suitable candidates.
• Our team is globally distributed and committed to building a diverse, high-caliber workforce.