Job description
Since 2018, Wisp has been on a mission to put healthcare back in patients’ hands. We connect patients with hassle-free sexual + reproductive care online, with discreet and convenient treatment that saves them time, money, and stress. Our goal is to empower everyone to make the decisions about their health that are right for them. We’ve scaled quickly, serving patients across the nation and becoming part of the WELL Health family—and now we want you.
We are a growing, fully-remote team in the United States looking for collaborators who are committed to our mission, passionate about results, eager to build something amazing, and excited to have high levels of ownership, accountability, and personal growth.
About the Role
We are seeking a detail-oriented and motivated Compliance Analyst to support the development, implementation, and ongoing maintenance of our compliance and privacy programs within the healthcare industry.
In this role, you will work cross-functionally with legal, product, engineering, marketing, and operations teams to help identify compliance risks, implement controls, and track initiatives that reduce and mitigate regulatory and privacy-related risk—particularly as it relates to HIPAA, patient privacy, and data protection.
This is a great opportunity for someone who is highly organized, curious, and eager to grow their career in healthcare compliance within a fast-moving, collaborative environment.
What You’ll Do
Assist in the development, implementation, and maintenance of compliance programs, policies, and procedures
Support HIPAA and patient privacy initiatives, including risk assessments, audits, and ongoing monitoring
Partner cross-functionally with legal, product, engineering, marketing, and operations to evaluate compliance and privacy impacts of new and existing initiatives
Help identify, document, and track compliance risks and mitigation efforts across the organization
Assist with privacy incident management, including documentation, investigation support, and follow-up actions
Support training and education efforts related to HIPAA, privacy, and regulatory compliance
Maintain compliance documentation, logs, and evidence needed for audits and internal reviews
Manage day-to-day complaint and issue management activities, including documentation, investigation, corrective actions, and reporting.
Conduct compliance reviews of marketing materials for regulatory accuracy and risk mitigation.
Assist with drafting, updating, and reviewing internal policies and procedures to ensure compliance with applicable laws, regulations, and external policy requirements, including, but not limited to, consumer facing Privacy Policy, Terms of Service, Telehealth Consent.
Serve as the primary liaison for internal and external audits, coordinating audit requests, responses, and remediation activities.
Serve as the primary liaison for internal and external audits, coordinating audit requests, responses, and remediation activities.
Monitor regulatory updates and help assess their impact on company policies and operations
Support vendor and third-party risk assessments related to data privacy and security
Help develop processes to ensure compliance considerations are embedded early in marketing, product and operational workflows
What We’re Looking For
2–5 years of experience in healthcare compliance, privacy, risk, or a related field
Foundational knowledge of HIPAA, patient privacy, and healthcare regulatory requirements
Strong attention to detail and ability to manage multiple initiatives simultaneously
Experience working cross-functionally with technical and non-technical teams
Excellent written and verbal communication skills
Strong organizational and documentation skills
Ability to evaluate processes and identify areas of risk or improvement
Comfortable working in a fast-paced environment with evolving regulatory requirements
Proactive mindset with a willingness to learn and grow
Nice to Have
Experience in telehealth, digital health, or healthcare technology
Familiarity with data protection frameworks beyond HIPAA (e.g., state privacy laws)
Experience supporting audits or regulatory inquiries
Exposure to incident response or breach notification processes
Certifications such as CHC, CHPC, or similar (or interest in pursuing one)
Visa sponsorship or transfer is not available for this position at present. Must be authorized to work in the country this requisition states.
Wisp is an equal-opportunity employer. We are proud to foster a workplace free from discrimination. We strongly believe that diversity of experience, perspectives, and background will lead to a better environment for our employees and a better product for our users and patients.
If you are committed to collaborative problem solving, creating high-quality and user-centric products, and want to make waves in sexual and reproductive healthcare, join us!
