> Markdown version of [/jobs/ext/1716993-chief-compliance-officer](https://www.wearedevelopers.com/jobs/ext/1716993-chief-compliance-officer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Chief Compliance Officer - **Company:** OpenLoop Health, Inc. - **Location:** United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** EHealth, Wearables, Software Version Control - **Published:** July 31, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=be36df00bbb64b80 ## About the Role * 10-15+ years building and leading compliance programs in technology-forward, multi-state healthcare or pharmacy-adjacent environments (digital health, wearables, telehealth, virtual care platforms, healthtech, consumer wellness with medical claims, eRx/fulfillment). * Track record of hiring/mentoring a high-performing team; comfort with greenfield environments. * Demonstrated ability to prioritize ruthlessly and communicate tradeoffs. * Executive presence, excellent written/oral communication, and the ability to influence across Legal, Product, Security, and Clinical. * Builder's mindset; systems thinker; operationally rigorous. * Calm in ambiguity; bias for action; data-informed decision-making. * High integrity and sound judgment; low-ego collaborator. ## Description OpenLoop builds the platform behind virtual care and modern care delivery. As Chief Compliance Officer (CCO), you will define and own our enterprise compliance strategy and operating model. You'll design and scale a risk-based program covering clinical, pharmacy, privacy-adjacent, security-adjacent, and commercial activities. You'll be accountable for the effectiveness of the program, for well-governed decision-making, and for measurable risk reduction across our product lines and service offerings., * Build & lead the function: Lead the Compliance organization (Healthcare, Pharmacy, Privacy, Audit). Establish vision, staffing plan, budget, and success metrics. * Policy & control architecture: Create a lean, living library of policies, standards, and SOPs mapped to legal and regulatory obligations (HIPAA/HITECH, state privacy, state practice of medicine, telehealth/telepharmacy rules, CLIA, FDA/FTC/DEA touchpoints as applicable). Ensure version control, ownership, and training coverage. * Monitoring & Audit: Establish continuous monitoring, internal audits, and issue management workflows. * Product & growth enablement: Embed compliance into product development, launch gates, marketing/advertising, vendor onboarding, and new market entry. Be a consultative partner who accelerates smart bets and blocks only what's truly high-risk. * Incident readiness & response: Coordinate with Security and Legal on investigations, breach response, regulator engagement, and consumer communications. Lead post-incident lessons learned. * Third-party & FDR oversight: Define due diligence, contracting standards, and ongoing oversight for vendors, prescribers, partner pharmacies, and other downstream entities. * Training & culture: Deliver role-based, high-signal training; cultivate an open-reporting culture with non-retaliation, hotline oversight, and trend analysis. * Regulatory engagement: Serve as the primary point of contact to relevant regulators and accreditation bodies. Proactively monitor regulatory change and prepare the business. * Board governance: Provide updates to the Board as required. * Other duties as assigned. ## Related Videos - [Great DevEx and Regulatory Compliance - Possible?](https://www.wearedevelopers.com/videos/1426-great-devex-and-regulatory-compliance-possible) - [Keep your code refactorable](https://www.wearedevelopers.com/videos/381-keep-your-code-refactorable) - [Android beyond mobile: Cars, TVs, and Wearables](https://www.wearedevelopers.com/videos/553-android-beyond-mobile-cars-tvs-and-wearables) - [Policy as [versioned] code - you're doing it wrong](https://www.wearedevelopers.com/videos/532-policy-as-versioned-code-you-re-doing-it-wrong) - [Coffee with Developers - Adam Wiggins](https://www.wearedevelopers.com/videos/919-coffee-with-developers-adam-wiggins) - [Reality and Beyond: Coding a Drone Using {Unity 3D .NET} and ChatGPT AI!](https://www.wearedevelopers.com/videos/702-reality-and-beyond-coding-a-drone-using-unity-3d-net-and-chatgpt-ai) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [The Future of Open Source: A Deep Dive - Scott Chacon at WeAreDevelopers World Congress 2024](https://www.wearedevelopers.com/magazine/471-the-future-of-open-source-a-deep-dive-scott-chacon-at-wearedevelopers-world-congress-2024) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers) - [Dev Digest 150 - The shift to AI generated code, fingerprinting and OKRs vs. doing your job](https://www.wearedevelopers.com/magazine/533-dev-digest-150-the-shift-to-ai-generated-code-fingerprinting-and-okrs-vs-doing-your-job)