ClearWellness - Legal Counsel & HIPAA Compliance Officer (100% Remote)

Overview

This role involves serving as Legal Counsel and HIPAA Compliance Officer for a health and wellness-focused organization. The position is responsible for overseeing HIPAA compliance programs, safeguarding patient health information (PHI), conducting risk assessments, managing breach investigations, and educating staff on privacy practices. Additionally, the role handles a broad range of legal matters including contract review and negotiation, regulatory compliance, and advising on Medicare/Medicaid and medical device regulations.

Responsibilities

• Develop, review, update, and communicate HIPAA compliance policies and procedures to ensure alignment with legal and regulatory requirements.
• Conduct regular HIPAA audits, risk assessments, and compliance reviews; identify gaps and implement corrective actions.
• Implement and oversee technical, physical, and administrative safeguards to mitigate regulatory risks.
• Monitor ongoing compliance activities and support programs to maintain adherence to HIPAA and applicable laws.
• Investigate suspected or reported HIPAA breaches and manage required reporting per Federal and State laws.
• Develop, maintain, and deliver comprehensive HIPAA training programs to ensure staff awareness.
• Review and manage contracts with third-party vendors accessing PHI to ensure HIPAA compliance.
• Draft, review, and negotiate contracts and legal documents with third parties, including vendors handling PHI.
• Oversee litigation, dispute resolution, and coordinate with external counsel as needed.
• Collaborate with healthcare providers, IT staff, legal counsel, and senior management on HIPAA compliance strategies.
• Provide strategic legal advice to executive leadership and departments to support business objectives.
• Coordinate with senior legal counsel to align on high-risk legal matters.
• Advise on and ensure compliance with local, state, and federal regulations affecting the organization.
• Manage consumer-focused policies and agreements including Privacy Policy, CCPA, DOPPA, and Terms of Use.
• Monitor legislative and regulatory changes and assess their impact on policies and operations.
• Advise on Medicare and Medicaid DME supplier enrollment, accreditation, and competitive bidding requirements.
• Interpret and apply CMS Local and National Coverage Determinations relevant to PERS and DME product lines.
• Provide guidance on Anti-Kickback Statute, Stark Law, and False Claims Act exposure related to referrals, marketing, and reimbursement.
• Support product development and launch teams with regulatory pathway analysis, labeling review, and promotional material approval for new PERS devices.
• Advise on privacy and data security obligations related to PERS devices and monitoring platforms, including HIPAA intersections.
• Counsel operational teams on liability, informed consent, and disclosure obligations for PERS program deployment and emergency response.
• Assist in developing internal policies governing DME/PERS program operations, incident response, and user rights.
• Perform other duties as assigned.

Requirements

• Juris Doctor (JD) degree.
• Bar admission in good standing, licensed to practice in one or more U.S. states.
• Minimum of seven (7) years combined experience in law firm and/or in-house counsel roles.
• Prior experience as a HIPAA Compliance Officer.
• Deep understanding of HIPAA regulations including Privacy, Security, and Enforcement Rules.
• Strong analytical and problem-solving skills.
• Demonstrated leadership through influence, mentoring, and driving cross-functional initiatives.
• Excellent communication and interpersonal skills for training and collaboration.
• Self-starter with strong organizational and time management abilities.
• Ability to work collaboratively in a team-oriented environment.
• Discretion, sound decision-making, and confidentiality.
• Willingness and ability to work flexible hours and travel up to 10%, including occasional overnight trips.
• Proficiency with Microsoft Office Suite and virtual communication tools (e.g., Microsoft Teams, Slack).

Preferred Qualifications

• Experience implementing a HIPAA compliance program from inception.
• Experience with Personal Emergency Response Systems (PERS), including legal oversight of vendor relationships and data privacy.
• Knowledge of ISO 13485:2016 Medical Devices and 21 CFR 820.
• Experience with telehealth, remote patient monitoring (RPM), or connected medical device platforms.
• Prior in-house healthcare legal or compliance experience at a DME supplier, PERS company, or home health organization.
• Familiarity with general healthcare compliance programs.

Physical Demands

• Sitting, standing, and walking for 95-100% of the time.
• Keyboarding 40-60% of the time.
• Close vision required for viewing computer monitors, tablets, and cell phones 95-100% of the time.

Reasonable accommodations will be provided in accordance with the Americans with Disabilities Act (ADA) and applicable laws.

Work Environment

• 100% remote work.
• Travel approximately 10%, which may include overnight and out-of-state trips.
• Travel may involve exposure to varying weather, temperature conditions, driving, and traffic hazards.

Compensation & Benefits

• Salary range: $165,000 to $200,000 per year plus an 18% bonus.
• Final compensation is based on qualifications, experience, and business needs.
• Comprehensive benefits package offered.

Location

• Remote within the United States.
• Candidates must be authorized to work in the U.S. without visa sponsorship.