Director of Legal

• Lead the legal function and oversee regulatory compliance across Biograph


• Build, manage, and scale the healthcare compliance program


• Ensure adherence to HIPAA, Stark Law, Anti-Kickback Statute, CPOM regulations, and applicable federal and state healthcare laws


• Draft, negotiate, and review commercial contracts, clinical vendor agreements, partnership leases, software licenses, and vendor relationships


• Serve as subject matter expert on regulations, accreditations, and licensure governing clinic-based imaging, labs, and point-of-care diagnostic testing


• Manage credentialing, state licensing, and scope-of-practice protocols for Biograph providers


• Partner with executive leadership, clinical operations, and product teams on regulatory risks, market expansion, and strategic initiatives


• Manage outside legal counsel and specialized regulatory agencies


• Establish and monitor HIPAA, SOC 2 Type II, and enterprise-wide risk management frameworks


• Develop privacy and security policies, breach notification protocols, and patient data safeguards with IT and security teams


• Develop and maintain compliance training, internal audit procedures, and risk assessments across clinic locations


• Monitor evolving healthcare regulations, digital health laws, and state medical board rules


• Support corporate governance, employment matters, internal investigations, and organization-wide risk management

Requirements

• Juris Doctor (JD) degree from an accredited law school


• Active bar admission in good standing in at least one U.S. jurisdiction


• 7+ years of practicing law, with significant experience in healthcare compliance, regulatory affairs, or healthcare transaction law


• Deep working knowledge of HIPAA/HITECH, Anti-Kickback Statute, Stark Law, CPOM, and state medical licensing requirements


• Broad generalist legal capability across contract drafting, corporate governance, intellectual property, and employment risk management


• Ability to translate complex regulatory requirements into actionable, business-oriented solutions for executive leadership


• Ability to manage complex projects independently and drive cross-functional alignment in a high-growth setting


• Experience managing external counsel, specialized legal vendors, and outside advisory budgets


• Attention to detail, ethical judgment, and commitment to legal compliance


• Legally authorized to work in the United States


• Exceptional: 9+ years of relevant healthcare legal experience, combining law firm and in-house experience at a high-growth healthcare startup or digital health company


• Exceptional: Proven track record of building healthcare compliance programs and legal operations from the ground up in a clinical or health-tech environment

Core Competencies

Demonstrates expertise in healthcare compliance, regulatory affairs, and legal operations, with a strong focus on HIPAA, Stark Law, and Anti-Kickback Statute. Proven ability to develop and manage compliance programs and translate complex regulations into actionable solutions for executive leadership.

Highest-signal resume keywords

• Healthcare Compliance Program Development


• HIPAA/HITECH Knowledge


• Contract Drafting and Negotiation


• Regulatory Affairs Management


• Juris Doctor (JD) Degree

Hard Skills

• Healthcare Compliance


• Regulatory Compliance


• Contract Drafting


• Legal Research


• Risk Management


• Project Management


• Corporate Governance


• Licensure Management


• Internal Auditing


• Legal Operations

Soft Skills

• Attention to Detail


• Ethical Judgment


• Cross-Functional Collaboration


• Communication Skills


• Problem-Solving

Certifications & Qualifications

• Active Bar Admission

Industry Keywords

• HIPAA


• Stark Law


• Anti-Kickback Statute


• CPOM Regulations


• Healthcare Law


• Digital Health


• Clinical Operations


• Point-of-Care Testing


• State Medical Licensing


• Healthcare Startup

Tools & Technologies

• Compliance Training Programs


• Risk Assessment Frameworks


• Breach Notification Protocols


• Patient Data Safeguards


• Legal Management Software