Privacy & Compliance Specialist

About the role

We are seeking a Privacy & Compliance Specialist to build and run Superpower's privacy and compliance program and accelerate our mission. This role will own privacy and compliance end-to-end within our longevity and functional medicine model.

Responsibilities

• Build and run Superpower's privacy program end-to-end — data mapping and inventory, privacy notices, consent flows, and data subject / patient rights requests (access, deletion, correction).
• Establish how Superpower collects, stores, processes, and uses member health data across EMRs, health information exchanges, genetic reports, wearables, and the AI-powered digital twin.
• Run privacy impact assessments and privacy-by-design reviews for new products, features, and services (e.g., prescription peptides).
• Manage vendor privacy diligence, data processing agreements, and Business Associate Agreements, and maintain the record of processing and data flows.
• Own compliance frameworks and audit readiness (e.g., HIPAA Security Rule, SOC 2) — policies, controls, evidence, and remediation.
• Run security and privacy awareness training and maintain the company risk register.
• Respond to customer and partner security questionnaires and support due diligence for partnerships and fundraising.
• Own incident response and breach assessment / notification workflows, in coordination with Engineering and leadership.
• Advise Product and Engineering on practical guardrails for AI-driven clinical recommendations and member data use.
• Track evolving state and federal privacy regulations — HIPAA, state health privacy laws (e.g., Washington's My Health My Data Act), CCPA/CPRA, and FTC health data rules — and translate them into concrete internal requirements.

Qualifications

• 5+ years in privacy and/or compliance, ideally in healthcare or another highly regulated, data-intensive industry, with hands-on experience running a privacy program.
• Working fluency with HIPAA and modern privacy laws (state health privacy laws, CCPA/CPRA, FTC health data rules); familiarity with frameworks like SOC 2 a plus.
• Ability to research and understand new regulatory requirements.
• Independent operator that builds scalable frameworks rather than one-off fixes, flagging risks before they become blockers.
• Strong judgment — able to distinguish real risk from theoretical risk, and to know when to escalate to counsel or leadership versus handle it directly.
• Excellent communication skills and ability to translate complex privacy and compliance concepts into clear, actionable guidance for non-specialists.
• Comfort with ambiguity, cross-functional collaboration, and building 0-to-1 infrastructure in a fast-moving, tech-enabled startup.
• Self-starter with a can-do attitude and an ownership mindset — you don't wait to be told what to do.
• Strong personal interest in longevity and preventive healthcare.
• Privacy certification (e.g., CIPP/US, CIPM, CIPP/E, or CHPC) valued but not required.
• No JD or bar membership; this is not a counsel role.

Why Join Us

Be part of a mission-driven team redefining preventative, root-cause, and longevity-focused care. Own privacy and compliance end-to-end and be known as someone who makes things possible — clearing the path so the team can move faster, not slower. Build a modern privacy and compliance function from the ground up, with real ownership and impact beyond a traditional compliance role. Work directly across Operations, Product, Engineering, Growth, and Clinical on a flat, high-velocity team.

About Superpower

Superpower is a new health system on a mission to extend and enhance human life. We started with lab testing, then data aggregation / digital twin, then an AI doctor, and now peptides. Over the past 6 months, we have grown 10x whilst halving CAC. Now we are gearing up for hyper growth. You can find more about us below:

superpower.com/series-a

Superpower Overview

• Culture at Superpower
• Company Philosophies
• Investors
• Influencers

Company Philosophies

• Insanely high talent bar, never settling. A players only (see Steve Jobs)
• We live to work as much as we work to live. But we sustainably espouse the superpower ethos of putting health first
• Aim to set the gold standard for team health culture on the planet — live the ethos!