Healthcare Regulatory & HIPAA Compliance Specialist

At 4MD Ltd. (4md.org), we are building the future of digital health. We unify clinical and administrative workflows into a single connected ecosystem—spanning AI medical scribes, intelligent practice management, EHR interoperability, revenue cycle management, and healthcare talent solutions.

Because our platform powers critical operations for clinicians, health systems, and public sector providers, maintaining enterprise-grade compliance and data security is core to everything we build.

We are seeking an experienced Healthcare Regulatory & HIPAA Compliance Specialist to lead and safeguard our global regulatory posture.

Operating remotely from the EU, you will be the operational backbone of our privacy and security compliance framework. You will bridge the gap between US healthcare regulations (HIPAA, HITECH) and European/global data protection standards (EU GDPR, NIS2, ISO 27001). You will work closely with our engineering, product, and leadership teams to embed privacy-by-design into our digital health and AI software.

• HIPAA & Data Protection Governance: Develop, maintain, and enforce our HIPAA Privacy, Security, and Breach Notification policies, alongside EU GDPR protocols for health data processing.
• Vendor & Contract Management: Oversee, negotiate, and audit Business Associate Agreements (BAAs), Data Processing Agreements (DPAs), and Standard Contractual Clauses (SCCs) across our vendor and client network.
• Risk Assessments & Audits: Lead annual HIPAA security risk assessments, gap analyses, and internal compliance audits across software systems and operational workflows.
• AI & Integration Compliance: Collaborate with product and engineering teams to ensure our AI-assisted features (medical scribing, coding engines) comply with evolving health data protection guidelines and cross-border data transfer rules.
• Incident Response: Act as the primary contact for regulatory inquiries, manage data privacy incidents, and lead root-cause investigations and breach notifications if necessary.
• Training & Culture: Design and roll out annual HIPAA and data privacy training modules for all workforce members, contractors, and clinical staff.

• Experience: 2+ years of hands-on experience in healthcare compliance, data privacy, or regulatory affairs within a digital health, HealthTech, or SaaS environment.
• US & EU Expertise: In-depth knowledge of HIPAA / HITECH standards, alongside strong working knowledge of EU GDPR (Article 9 - Special Category Data).
• Technical Savvy: Comfortable reading software flow diagrams, understanding cloud architecture (AWS/GCP), and working with engineering teams to map data pipelines.
• Certifications (Preferred): Certified in Healthcare Compliance (CHC), Certified in Healthcare Privacy and Security (CHPS), or CIPP/US / CIPP/E.
• Languages: Native/fluent professional proficiency in English (written and spoken). Additional European languages are a plus.
• Location: Must be based and legally authorized to work remotely within an EU member state.

• Competitive Salary: Industry-benchmarked compensation reflecting your location and experience.
• European Employment Standards: Full social security, health insurance, and standard statutory benefits based on your country of residence within the EU.
• Flexible Work Culture: 100% remote freedom with flexible working hours and home office equipment setup allowances.
• Generous Paid Time Off: Standard European leave package (25+ days minimum statutory paid time off, plus local public holidays).
• Growth & Impact: High-visibility role in a fast-scaling HealthTech enterprise transforming how doctors and clinics operate globally.

• Click Easy Apply or submit your CV and a brief note on your experience with HIPAA/GDPR dual-compliance to careers@4md.org.