Superpower
Privacy & Compliance Specialist
San Francisco · Full-time
Sponsorship not specifiedDetected 11 days ago
Incident ResponseComplianceHIPAAResearchLeadershipCommunicationCollaboration
About the role
- We started with lab testing, then data aggregation / digital twin, then an AI doctor, and now peptides.
- Over the past 6 months, we have grown 10x whilst halving CAC.
- A players only (see Steve Jobs https://twitter.com/founderspodcast/status/1665442439715225600?s=46&t=PK-vWojaLurY6eXl341Thw) - We live to work as much as we work to live.
Responsibilities
- Build and run Superpower's privacy program end-to-end - data mapping and inventory, privacy notices, consent flows, and data subject / patient rights requests (access, deletion, correction).
- Run privacy impact assessments and privacy-by-design reviews for new products, features, and services (e.g., prescription peptides).
- Manage vendor privacy diligence, data processing agreements, and Business Associate Agreements, and maintain the record of processing and data flows.
- Own compliance frameworks and audit readiness (e.g., HIPAA Security Rule, SOC 2) - policies, controls, evidence, and remediation.
- Run security and privacy awareness training and maintain the company risk register.
- Respond to customer and partner security questionnaires and support due diligence for partnerships and fundraising.
- Own incident response and breach assessment / notification workflows, in coordination with Engineering and leadership.
- Own privacy and compliance end-to-end and be known as someone who makes things possible - clearing the path so the team can move faster, not slower.
- Build a modern privacy and compliance function from the ground up, with real ownership and impact beyond a traditional compliance role.
- Evan Moore https://www.linkedin.com/in/evanmoore/details/experience/ (Founder of Doordash; Partner at Khosla Ventures)
Requirements
- Ability to research and understand new regulatory requirements.
- Excellent communication skills and ability to translate complex privacy and compliance concepts into clear, actionable guidance for non-specialists.
- Privacy certification (e.g., CIPP/US, CIPM, CIPP/E, or CHPC) valued but not required.
- 5+ years in privacy and/or compliance, ideally in healthcare or another highly regulated, data-intensive industry, with hands-on experience running a privacy program.
- Working fluency with HIPAA and modern privacy laws (state health privacy laws, CCPA/CPRA, FTC health data rules)
- Independent operator that builds scalable frameworks rather than one-off fixes, flagging risks before they become blockers.
- Strong judgment - able to distinguish real risk from theoretical risk, and to know when to escalate to counsel or leadership versus handle it directly.
- Comfort with ambiguity, cross-functional collaboration, and building 0-to-1 infrastructure in a fast-moving, tech-enabled startup.
- Self-starter with a can-do attitude and an ownership mindset - you don't wait to be told what to do.
- Strong personal interest in longevity and preventive healthcare.
- No JD or bar membership
- this is not a counsel role.
- Commitment
Nice to have
- familiarity with frameworks like SOC 2 a plus.
Benefits
- Superpower is a new health system on a mission to extend and enhance human life.
- But we sustainably espouse the superpower ethos of putting health first
- We aim to set the gold standard for team health culture on the planet - live the ethos!
- Forerunner https://www.forerunnerventures.com/ (Top consumer healthcare VC in the world; early board members of Hims and Oura; Kirsten, founder of Forerunner, led our Series A)
- 8VC https://8vc.com/ (leading health and bio investor)
Company info
- superpower.com/series-a http://superpower.com/series-a
- Superpower Overview https://www.notion.so/1f58444481d080e195dbe2e2e331b3df?pvs=21
- Culture at Superpower https://www.notion.so/Culture-at-Superpower-4321693ee66740e6ad92c449b54f42e2?pvs=21
- We are all here to genuinely do our life's best work
- Insanely high talent bar, never settling. A players only (see Steve Jobs https://twitter.com/founderspodcast/status/1665442439715225600?s=46&t=PK-vWojaLurY6eXl341Thw)
- We live to work as much as we work to live. But we sustainably espouse the superpower ethos of putting health first
- Cyan Bannister https://wellfound.com/p/cyantist (early investor into Uber and SpaceX, former partner at Founder's Fund, regarded as one of the top angels in the world)
- Balaji Srinivasan https://x.com/balajis (ex-Coinbase CTO and angel, ex-General Partner at a16z)
- Arielle Zuckerberg https://www.linkedin.com/in/ariellezuckerberg/ (active angel, tech leader, relatively famous brother)
- Cameron & Tyler Winklevoss https://winklevosscapital.com/portfolio/
Visa & Work Authorization
- We offer visa sponsorship and can support relocation to the United States for the right candidates.
Apply directly at Superpower →Create a free account for alerts like thisView Superpower immigration profile
This listing is sourced directly from Superpower's careers page and normalized into a canonical job model.