Superpower

Superpower

Privacy & Compliance Specialist

San Francisco · Full-time

Sponsorship not specifiedDetected 11 days ago
Incident ResponseComplianceHIPAAResearchLeadershipCommunicationCollaboration

About the role

  • We started with lab testing, then data aggregation / digital twin, then an AI doctor, and now peptides.
  • Over the past 6 months, we have grown 10x whilst halving CAC.
  • A players only (see Steve Jobs https://twitter.com/founderspodcast/status/1665442439715225600?s=46&t=PK-vWojaLurY6eXl341Thw) - We live to work as much as we work to live.

Responsibilities

  • Build and run Superpower's privacy program end-to-end - data mapping and inventory, privacy notices, consent flows, and data subject / patient rights requests (access, deletion, correction).
  • Run privacy impact assessments and privacy-by-design reviews for new products, features, and services (e.g., prescription peptides).
  • Manage vendor privacy diligence, data processing agreements, and Business Associate Agreements, and maintain the record of processing and data flows.
  • Own compliance frameworks and audit readiness (e.g., HIPAA Security Rule, SOC 2) - policies, controls, evidence, and remediation.
  • Run security and privacy awareness training and maintain the company risk register.
  • Respond to customer and partner security questionnaires and support due diligence for partnerships and fundraising.
  • Own incident response and breach assessment / notification workflows, in coordination with Engineering and leadership.
  • Own privacy and compliance end-to-end and be known as someone who makes things possible - clearing the path so the team can move faster, not slower.
  • Build a modern privacy and compliance function from the ground up, with real ownership and impact beyond a traditional compliance role.
  • Evan Moore https://www.linkedin.com/in/evanmoore/details/experience/ (Founder of Doordash; Partner at Khosla Ventures)

Requirements

  • Ability to research and understand new regulatory requirements.
  • Excellent communication skills and ability to translate complex privacy and compliance concepts into clear, actionable guidance for non-specialists.
  • Privacy certification (e.g., CIPP/US, CIPM, CIPP/E, or CHPC) valued but not required.
  • 5+ years in privacy and/or compliance, ideally in healthcare or another highly regulated, data-intensive industry, with hands-on experience running a privacy program.
  • Working fluency with HIPAA and modern privacy laws (state health privacy laws, CCPA/CPRA, FTC health data rules)
  • Independent operator that builds scalable frameworks rather than one-off fixes, flagging risks before they become blockers.
  • Strong judgment - able to distinguish real risk from theoretical risk, and to know when to escalate to counsel or leadership versus handle it directly.
  • Comfort with ambiguity, cross-functional collaboration, and building 0-to-1 infrastructure in a fast-moving, tech-enabled startup.
  • Self-starter with a can-do attitude and an ownership mindset - you don't wait to be told what to do.
  • Strong personal interest in longevity and preventive healthcare.
  • No JD or bar membership
  • this is not a counsel role.
  • Commitment

Nice to have

  • familiarity with frameworks like SOC 2 a plus.

Benefits

  • Superpower is a new health system on a mission to extend and enhance human life.
  • But we sustainably espouse the superpower ethos of putting health first
  • We aim to set the gold standard for team health culture on the planet - live the ethos!
  • Forerunner https://www.forerunnerventures.com/ (Top consumer healthcare VC in the world; early board members of Hims and Oura; Kirsten, founder of Forerunner, led our Series A)
  • 8VC https://8vc.com/ (leading health and bio investor)

Company info

  • superpower.com/series-a http://superpower.com/series-a
  • Superpower Overview https://www.notion.so/1f58444481d080e195dbe2e2e331b3df?pvs=21
  • Culture at Superpower https://www.notion.so/Culture-at-Superpower-4321693ee66740e6ad92c449b54f42e2?pvs=21
  • We are all here to genuinely do our life's best work
  • Insanely high talent bar, never settling. A players only (see Steve Jobs https://twitter.com/founderspodcast/status/1665442439715225600?s=46&t=PK-vWojaLurY6eXl341Thw)
  • We live to work as much as we work to live. But we sustainably espouse the superpower ethos of putting health first
  • Cyan Bannister https://wellfound.com/p/cyantist (early investor into Uber and SpaceX, former partner at Founder's Fund, regarded as one of the top angels in the world)
  • Balaji Srinivasan https://x.com/balajis (ex-Coinbase CTO and angel, ex-General Partner at a16z)
  • Arielle Zuckerberg https://www.linkedin.com/in/ariellezuckerberg/ (active angel, tech leader, relatively famous brother)
  • Cameron & Tyler Winklevoss https://winklevosscapital.com/portfolio/

Visa & Work Authorization

  • We offer visa sponsorship and can support relocation to the United States for the right candidates.

This listing is sourced directly from Superpower's careers page and normalized into a canonical job model.