Compliance Analyst

Since 2018, Wisp has been on a mission to put healthcare back in patients’ hands. We connect patients with hassle-free sexual + reproductive care online, with discreet and convenient treatment that saves them time, money, and stress. Our goal is to empower everyone to make the decisions about their health that are right for them. We’ve scaled quickly, serving patients across the nation and becoming part of the WELL Health family—and now we want you.

We are a growing, fully-remote team in the United States looking for collaborators who are committed to our mission, passionate about results, eager to build something amazing, and excited to have high levels of ownership, accountability, and personal growth.

About the Role

We are seeking a detail-oriented and motivated Compliance Analyst to support the development, implementation, and ongoing maintenance of our compliance and privacy programs within the healthcare industry.

In this role, you will work cross-functionally with legal, product, engineering, marketing, and operations teams to help identify compliance risks, implement controls, and track initiatives that reduce and mitigate regulatory and privacy-related risk—particularly as it relates to HIPAA, patient privacy, and data protection.

This is a great opportunity for someone who is highly organized, curious, and eager to grow their career in healthcare compliance within a fast-moving, collaborative environment.

What You’ll Do

• Assist in the development, implementation, and maintenance of compliance programs, policies, and procedures

• Support HIPAA and patient privacy initiatives, including risk assessments, audits, and ongoing monitoring

• Partner cross-functionally with legal, product, engineering, marketing, and operations to evaluate compliance and privacy impacts of new and existing initiatives

• Help identify, document, and track compliance risks and mitigation efforts across the organization

• Assist with privacy incident management, including documentation, investigation support, and follow-up actions

• Support training and education efforts related to HIPAA, privacy, and regulatory compliance

• Maintain compliance documentation, logs, and evidence needed for audits and internal reviews

• Manage day-to-day complaint and issue management activities, including documentation, investigation, corrective actions, and reporting.

• Conduct compliance reviews of marketing materials for regulatory accuracy and risk mitigation.

• Assist with drafting, updating, and reviewing internal policies and procedures to ensure compliance with applicable laws, regulations, and external policy requirements, including, but not limited to, consumer facing Privacy Policy, Terms of Service, Telehealth Consent.

• Serve as the primary liaison for internal and external audits, coordinating audit requests, responses, and remediation activities.

• Serve as the primary liaison for internal and external audits, coordinating audit requests, responses, and remediation activities.

• Monitor regulatory updates and help assess their impact on company policies and operations

• Support vendor and third-party risk assessments related to data privacy and security

• Help develop processes to ensure compliance considerations are embedded early in marketing, product and operational workflows

What We’re Looking For

• 2–5 years of experience in healthcare compliance, privacy, risk, or a related field

• Foundational knowledge of HIPAA, patient privacy, and healthcare regulatory requirements

• Strong attention to detail and ability to manage multiple initiatives simultaneously

• Experience working cross-functionally with technical and non-technical teams

• Excellent written and verbal communication skills

• Strong organizational and documentation skills

• Ability to evaluate processes and identify areas of risk or improvement

• Comfortable working in a fast-paced environment with evolving regulatory requirements

• Proactive mindset with a willingness to learn and grow

Nice to Have

• Experience in telehealth, digital health, or healthcare technology

• Familiarity with data protection frameworks beyond HIPAA (e.g., state privacy laws)

• Experience supporting audits or regulatory inquiries

• Exposure to incident response or breach notification processes

• Certifications such as CHC, CHPC, or similar (or interest in pursuing one)

Visa sponsorship or transfer is not available for this position at present. Must be authorized to work in the country this requisition states.

Wisp is an equal-opportunity employer. We are proud to foster a workplace free from discrimination. We strongly believe that diversity of experience, perspectives, and background will lead to a better environment for our employees and a better product for our users and patients.

If you are committed to collaborative problem solving, creating high-quality and user-centric products, and want to make waves in sexual and reproductive healthcare, join us!