fullscript - Compliance Lead

• Product Governance and Growth Support • Partner with Product and Engineering on new features, architecture, and user flows to ensure privacy-by-design is integrated before launch, not retrofitted after. • Lead privacy review of AI features and AI vendors, including model training restrictions, PHI usage controls, transparency disclosures, and pre-launch governance checkpoints. • Support clinical research, outcomes tracking, and de-identification workflows so that secondary uses of data are governed under documented standards. • Triage and respond to fast-moving product and commercial requests with calibrated, written guidance. • Own day-to-day execution of core privacy operations alongside the Senior Director of Compliance, with the ability to operate independently on assigned workstreams. • Operate Fullscript’s OneTrust environment for vendor reviews, data mapping, PIAs, consumer rights requests, and reporting, including configuration of new workflows as the program scales. • Lead privacy incident response activities, including intake, triage, coordination with cross-functional stakeholders, documentation, and tracking remediation efforts through resolution. • Business Enablement and Compliance Monitoring • Build trusted working relationships with stakeholders across the business so that privacy is engaged early on new initiatives rather than at the end. • Translate HIPAA, PIPEDA, Quebec Law 25, CPRA, and other applicable US state privacy laws into plain-language guidance, playbooks, and training materials the business can use without further interpretation. • Maintain ongoing monitoring of Fullscript’s privacy posture, surface emerging risk areas to the Senior Director of Compliance.