Overview
A health care regulatory attorney is needed to guide a fast-moving telehealth organization operating in a multi-state environment involving telehealth, pharmacy, and digital health regulation. This is a high-impact, largely autonomous role serving as the primary internal regulatory authority for healthcare compliance and strategy.
At the current stage, legal and compliance functions are combined into a single department. As the organization grows, this leader will help guide the separation of legal and compliance into distinct roles, consistent with industry guidance and best practices.
Responsibilities
- Compliance program ownership: Build and run an effective compliance program aligned with the seven elements and current OIG guidance, including:
- Policies and SOPs
- Role-based training
- Confidential reporting and investigations
- Risk assessments and an annual work plan
- Monitoring and auditing licensure
- DEA verification and vendor diligence findings
- PC-MSO structure and corporate practice of medicine (CPOM): Own legal integrity of the structure across states of operation, including:
- CPOM, fee-splitting, and lay control of clinical decision-making
- Drafting and re-papering management services agreements
- Administering affiliated professional entities and holding the clinical/administrative line
- Training non-clinical leadership on operating and communicating within the structure
- Managing state MSO transparency and transaction-notification filings with outside counsel
- Regulatory strategy and legal advisory: Provide early guidance to shape new products, care models, protocols, and pricing (rather than blocking launch). Maintain and update:
- A state-by-state telehealth matrix
- Position papers and a risk register
- Prioritized action plans with owners and deadlines based on legislative and enforcement developments
- Clinical workforce counsel: Advise on multi-state licensure strategy and compacts, scope of practice and supervision requirements for advanced practice clinicians, credentialing and peer review, clinician contracting and compensation, and adverse event/board complaint/NPDB matters.
- Prescribing and pharmacy compliance: Own Ryan Haight Act and DEA telemedicine prescribing compliance, including readiness for an anticipated special registration framework. Advise on:
- State prescribing rules
- Pharmacy and 503A/503B compounding relationships
- FDA-regulated promotional and software touchpoints
- Requirements imposed by LegitScript, payment processors, and advertising platforms
- Privacy and data compliance: Serve as a Privacy Office function for:
- HIPAA
- State consumer health data laws
- FTC Act Section 5
- Tracking-technology exposure
- In the BAA program: breach risk assessments and OCR reporting
- PC–MSO data flows and TCPA/CAN-SPAM outreach rules
- AI and clinical algorithm governance
- Marketing, fraud, and abuse risk: Review advertising claims, testimonials, influencer and affiliate arrangements, website terms, consent flows, and auto-renewal compliance against FTC and state law. Structure compliant referral relationships and patient acquisition channels, including discount and waiver programs, and clinician/sales compensation to manage fraud and abuse exposure.
- Contracting and external interactions: Draft and negotiate the healthcare-regulated contract set. Support state expansion through go-live sign-off. Serve as primary contact for medical boards, health departments, attorneys general, DEA, and OCR. Manage an outside-counsel vendor stack.
Subject Matter Knowledge
Strong depth is expected in both structural and clinical regulation, including:
- CPOM and fee-splitting
- MSA design and fair market value
- Professional entity governance
- State MSO transparency and transaction notice laws
- Medical board authority, scope of practice, credentialing and peer review
- Telehealth practice standards and informed consent
- Licensure compacts
Strong depth is also expected across telehealth operations and data, including:
- Ryan Haight and DEA prescribing
- PDMP and e-prescribing
- Pharmacy and compounding
- HIPAA and 42 C.F.R. Part 2
- State consumer health data and privacy laws
- FTC Act Section 5
- Tracking technology
- TCPA and AI governance
Fraud and abuse working literacy (helpful): AKS, Stark, EKRA, CMP, False Claims Act, OIG guidance, and exclusion screening.
Working Style
- Judgment over recitation; provide clear recommendations with stated risk posture.
- Business fluency to identify the compliant path and enable action.
- Builder mindset for a compliance program that is still evolving.
- Credibility with clinicians and the ability to hold the line with senior leadership when structure or patient safety requires it.
- Clear writing that non-lawyers can apply without follow-up.
Requirements
- J.D. and active bar membership in good standing in at least one U.S. jurisdiction, with eligibility to serve as in-house counsel in Nevada.
- 6–8+ years of healthcare regulatory experience at a top healthcare regulatory practice, an AmLaw firm’s healthcare group, or in-house at a provider, digital health, or payer organization.
- Direct, hands-on experience with PC-MSO / friendly PC structures, including building, papering, defending, or operating them.
- Command of CPOM and fee-splitting doctrines, telehealth practice and modality rules, multi-state licensure, HIPAA, AKS, and state medical board regulation.
- Experience advising on or materially contributing to a healthcare compliance program.
- Track record of clear, decisive, risk-calibrated guidance for fast-moving commercial teams.
Preferred Qualifications
- Digital health experience during a period of multi-state expansion.
- DEA telemedicine prescribing and controlled substance workflows.
- State MSO oversight, ownership transparency, and transaction notification regimes.
- Prior service as Chief Compliance Officer or Privacy Officer.
- Government investigations, board inquiries, or OCR matters.
Compensation & Benefits
- Platinum PPO Healthcare + Vision & Dental (employer covers 99% for employees and 50% for qualified dependents).
- 401(k) with matching contributions beginning your first day.
- Generous PTO plan.
Location
- Remote with team members based across the U.S., alongside a Las Vegas, NV office.
- Role is open to remote, hybrid, or in-person in Las Vegas, NV, Seattle, WA, or Miami.
Work Authorization
Applicants must be authorized to work for any employer in the U.S. The organization cannot sponsor or take over sponsorship of an employment Visa at this time.
Equal Opportunity Statement
The organization is committed to an inclusive, discrimination-free workplace and welcomes applicants from all backgrounds. Applicants are considered for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other status protected by applicable federal, state, or local law. Reasonable accommodations are available for applicants during the application process.