---
title: 'Senior Counsel, Data Governance at Hello Heart'
canonical: 'https://feeny.ai/job/senior-counsel-data-governance-hello-heart-united-states-dc0wq9cjvrj1'
type: 'job'
last_seen: '2026-10-18'
---

# Senior Counsel, Data Governance at Hello Heart

- **Company:** Hello Heart
- **Location:** United States
- **Work type:** remote
- **Posted:** 2026-09-16
- **Last confirmed live:** 2026-10-18
- **Apply:** https://job-boards.greenhouse.io/helloheart/jobs/8815102002

## Job description

About Hello Heart:

Hello Heart is on a mission to make heart attacks a thing of the past.

We’re an AI company focused exclusively on heart health, building a platform that predicts and prevents cardiac events before they happen—identifying risk up to 10 days in advance versus 10 years in traditional clinical models.

This is already working at scale. Hello Heart has been shown to reduce inpatient hospital days by 47% and deliver ~$1,800 in annual savings per member. Hello Heart is the cardiac prevention partner to over 80% of large U.S. health plans and serves hundreds of public and private employers.

We’re defining how the #1 cause of death—heart disease—is managed in the AI era. Join us.

About the role: As Senior Counsel, Data Governance, you will own Hello Heart’s legal and regulatory strategy for data use. You will lead negotiations on how Hello Heart can collect, use, share, retain, reuse, and apply AI to data, ensuring our agreements give the company the rights it needs to operate, innovate, and grow while meeting our regulatory and contractual obligations.

Reporting into our Chief Compliance and Privacy Officer, you will serve as their right hand. You will have direct exposure to and working relationships with Hello Heart’s C-suite and senior executives, partnering closely with leaders across Sales, Technology, Product, Security, and other functions on high-impact business decisions. You will lead the day-to-day operation of Hello Heart’s privacy and data governance programs and the execution of our AI governance program, translating complex privacy, data, and AI requirements into contracts, policies, controls, product requirements, and operating practices across the company.

This is an owner-operator role. You will not simply advise teams on requirements. You will negotiate, build, implement, maintain, run, monitor, audit, and remediate the programs and controls within your scope.

Responsibilities:

- Lead and execute negotiations regarding Hello Heart’s data rights across new and existing client and partner agreements, including BAAs, DPAs, data use agreements, data sharing agreements, and other agreements governing data rights and obligations, including data use, sharing, ownership, secondary use and reuse, AI use and training, system outputs and data-related intellectual property rights, retention, de-identification, deletion, disclosure, and downstream use; proactively identify and renegotiate existing agreements where needed to secure appropriate rights and manage regulatory and contractual risk.
- Lead the day-to-day operation of Hello Heart’s Privacy Program under the direction of the Chief Compliance and Privacy Officer, including HIPAA and state privacy and consumer health data requirements, privacy notices and consents, consumer rights, privacy incidents and breach determinations, required notifications, regulator inquiries, and ongoing compliance.
- Lead the day-to-day operation and administration of Hello Heart’s AI governance program, including interpretation and implementation of federal and state AI laws and regulatory requirements, the AI Governance Committee, governance framework, policies, procedures, approval processes, AI system and use-case inventory, risk assessments, responsible AI controls, governance records, and regulatory change management.
- Lead the interpretation and implementation of the legal and regulatory framework for data governance, including requirements for data collection, use, sharing, secondary use and reuse, AI use, retention, de-identification, deletion, disclosure, residency, and cross-border transfers; translate changing requirements into practical policies, controls, procedures, and implementation plans.
- Build and maintain the systems and controls that operationalize data governance, including data maps and records of processing, data classification and handling standards, contractual obligation repositories and processes for translating contractual obligations into operational controls, accountable owners, implementation requirements, and evidence of compliance, retention and disposal requirements, and vendor and third-party privacy and data reviews and data-use controls.
- Partner with Product, Engineering, Security, AI, Commercial, User Support, and other teams to implement privacy, data, and AI requirements, including privacy by design, permissible data and AI uses, product notices and consents, technical and operational controls, and processes for addressing consumer and user questions; serve as the day-to-day escalation point for privacy, data rights, permissible data use, and AI governance questions, escalating material risks to the Chief Compliance and Privacy Officer.
- Lead day-to-day privacy, data, and AI risk and incident management, including conducting assessments, leading the privacy, data, and AI aspects of incident response and breach analysis, escalating material risks, coordinating required notifications and corrective actions, and driving remediation through completion.
- Lead privacy, data, and AI compliance monitoring and assurance, including audits, client audits, regulatory inquiries, investigations, certifications, attestations, client trust and assurance requests, and review of representations regarding Hello Heart’s privacy, data, and AI practices; monitor compliance and drive remediation when gaps are identified.
- Build and maintain the program’s policies, playbooks, training, and reporting, including standards and procedures for privacy, data governance, AI governance, responsible AI, and data rights, as well as training for Product, Engineering, Commercial, User Support, and other relevant teams and executive reporting on program performance, risk, findings, and remediation.

Qualifications:

- 8+ years of legal experience with substantial healthcare regulatory, privacy, and compliance experience in a HIPAA-regulated organization. Healthcare experience is required.
- Significant experience negotiating complex data rights with sophisticated enterprise clients and partners, including large health plans, healthcare organizations, and other heavily represented counterparties; must be able to independently lead difficult negotiations involving data use, ownership, AI rights, secondary use, retention, deletion, de-identification, and related restrictions.
- Experience operating healthcare privacy and compliance programs, including regulatory interpretation, incident and breach response, risk assessment, monitoring, auditing, corrective actions, and remediation.
- Strong compliance judgment and an owner-operator mindset, with the ability to move from legal interpretation to practical implementation and drive issues through resolution.
- Advanced AI fluency and automation capability. You use AI extensively in substantive legal and compliance work, automate repeatable workflows, and are comfortable building and using AI agents to increase speed, quality, consistency, and leverage in a lean team.
- Experience with AI governance, including emerging AI laws, risk assessments, approval workflows, inventories, responsible AI controls, and monitoring.
- Exceptional judgment, executive presence, and communication skills, with the ability to represent Hello Heart in high-stakes negotiations, defend well-reasoned positions, and effectively challenge sophisticated internal and external stakeholders when necessary.
- Active license to practice law and membership in good standing with a U.S. state bar.

Nice to Have:

- Experience with international privacy and data protection requirements, including cross-border data transfers.
- Privacy or AI governance certifications such as CIPP/US, CIPM, or AIGP.
- Experience building privacy or AI governance programs at a growth-stage or high-growth company.
- Experience managing client trust, security questionnaires, certifications, attestations, or enterprise customer assurance programs.

The US base salary range for this full-time position is $204,000.00 to $226,000.00. Salary ranges are determined by role and level. Compensation is determined by additional factors, including job-related skills, experience, and relevant education or training. Please note that the compensation details listed in US role postings reflect the salary only, and do not include equity or benefits. Hello Heart has a positive, diverse, and supportive culture - we look for people who are collaborative, creative, and courageous. Oh, and if you want to see some recent evidence of the fun things we do at Hello Heart, check out our [Instagram page](https://www.instagram.com/helloheartapp/).

## About Hello Heart

## Company Overview
- **One-liner**: Hello Heart is a digital therapeutics company focused exclusively on preventing and managing heart disease through AI-powered coaching, connected devices, and behavioral science.
- **Entity Type**: Private (Series D)
- **Headquarters**: Menlo Park, California (Silicon Valley) with additional offices in Tel Aviv, Israel; New York City; and Austin, Texas [helloheart.com](https://www.helloheart.com/about/company)
- **Founded**: 2013
- **Founders**: Maayan Cohen (CEO) and Michal Gutman [helloheart.com](https://www.helloheart.com/about/company)

## Core Business
- **Primary industry**: Digital Therapeutics / Healthcare IT
- **Target customers**: B2B (employers, health plans, health systems) — the solution is distributed through benefits programs; end users are individuals managing hypertension and cardiovascular risk.
- **Mission or purpose statement**: "Taking on the number one cause of death" — empowering people to manage their heart health and change the future of heart health for good. [helloheart.com](https://www.helloheart.com/about/company)

## Products & Services
- **Hello Heart Program (Digital Therapeutic)**: An app-based program combining a free blood pressure monitor with AI-powered guidance, personalized coaching, medication tracking, and behavioral science to help users lower and manage their blood pressure. The program is clinically validated and has demonstrated a 47% reduction in inpatient hospital days and $1,709 in savings per member per year. [helloheart.com](https://www.helloheart.com/)
- **Nia (AI Health Assistant)**: An AI-powered assistant designed to help members understand heart health questions between visits, operating within clinician-informed safety guardrails for accuracy and safety. [helloheart.com](https://www.helloheart.com/)

## Market Standing
- **Valuation/Market Cap**: Not disclosed
- **Key Metric**: **$138M total funding raised through Series D** [helloheart.com](https://www.helloheart.com/about/careers)
- **Notable Investors/Partners**: Member of the American Heart Association Innovators’ Network, American College of Cardiology Industry Advisory Forum, and CVS Health Point Solutions Management program. [helloheart.com](https://www.helloheart.com/about/company)
- **Growth Signals**: More than **225 global employees** and over **452K subscribers** served. The company is expanding its AI capabilities with the launch of "Nia" and has a growing commercial presence across the U.S. [helloheart.com](https://www.helloheart.com/about/careers)

## Competitive Advantages
- **Exclusive focus on heart disease**: Hello Heart is the only digital therapeutics company to focus exclusively on heart disease, giving it deep domain expertise and a highly tailored product.
- **Proven clinical and financial ROI**: Published outcomes show 47% fewer inpatient hospital days and significant per-member cost savings, making the value proposition clear to employers and health plans.
- **AI-first approach with safety guardrails**: Their AI assistant "Nia" is purpose-built for heart health and operates within clinician-defined boundaries, balancing innovation with patient safety.
- **Connected device integration**: Providing a free blood pressure monitor removes barriers to entry and ensures accurate data collection.

## Strategic Focus
- **AI for behavior change and risk detection**: Hello Heart is investing heavily in AI to deliver more personalized, real-time support and to proactively identify risk signals.
- **Scaling commercial partnerships**: Through partnerships with major health plans (e.g., CVS Health), employers, and health systems, the company aims to expand its reach to millions more at-risk individuals.
- **Data privacy leadership**: The company emphasizes that it will "never sell our members' health information," positioning privacy as a core brand value in a sensitive market. [helloheart.com](https://www.helloheart.com/)

## Why Work Here
- **Mission-driven impact**: Employees work on a product that directly addresses the leading cause of death globally, offering a strong sense of purpose. The company culture is described as "transparent and collaborative" with a strong team "driven to change how patients manage their health." [helloheart.com](https://www.helloheart.com/about/company)
- **Growth and ownership**: Each team member receives an equity package ("stock options makes each of our employees real partners"), and the company emphasizes challenge and career growth. [helloheart.com](https://www.helloheart.com/about/careers)
- **Benefits**: Full medical, dental, and vision coverage for U.S. employees and dependents; unlimited PTO; and an annual company-wide offsite for all team members. [helloheart.com](https://www.helloheart.com/about/careers)
- **Work model**: The company has offices in multiple cities (Menlo Park, Tel Aviv, New York, Austin), but specific remote/hybrid policy details are not publicly stated on their careers page. [helloheart.com](https://www.helloheart.com/about/company)
- **Engineering culture**: With a Chief Technology and Product Officer leading product development, the company uses AI and connected devices, offering a compelling environment for engineers and data scientists in healthcare tech.

## Sources
1. [Hello Heart - About/Company](https://www.helloheart.com/about/company)
2. [Hello Heart - Careers Page](https://www.helloheart.com/about/careers)
3. [Hello Heart - Official Site](https://www.helloheart.com/)
4. [Hello Heart - Job Listings (Greenhouse)](https://job-boards.greenhouse.io/helloheart)

## Other roles at Hello Heart

- [Senior Data Analyst, GTM](https://feeny.ai/job/senior-data-analyst-gtm-hello-heart-united-states-1fy2wefkx7nt) — United States
- [Senior Product Analyst](https://feeny.ai/job/senior-product-analyst-hello-heart-tel-aviv-t1gtppkwrwhe) — Tel Aviv, Israel
- [Director, Client Strategy and Growth](https://feeny.ai/job/director-client-strategy-and-growth-hello-heart-united-states-1s7vx2e27y19) — United States
- [Senior Data Analyst, Product](https://feeny.ai/job/senior-data-analyst-product-hello-heart-tel-aviv-c3sn4ywbf66z) — Tel Aviv, Israel
- [Senior Manager, Revenue Operations](https://feeny.ai/job/senior-manager-revenue-operations-hello-heart-united-states-cjzgkv9zth1d) — United States
- [Senior Manager, Client Success](https://feeny.ai/job/senior-manager-client-success-hello-heart-united-states-nx2rq25ga73w) — United States
- [Senior Mobile Engineer (React Native)](https://feeny.ai/job/senior-mobile-engineer-react-native-hello-heart-tel-aviv-aeqdfyt0vhjr) — Tel Aviv, Israel
- [QA Engineer](https://feeny.ai/job/qa-engineer-hello-heart-tel-aviv-qhp1mmdmxa3e) — Tel Aviv, Israel
- [Vice President, Enterprise Marketing](https://feeny.ai/job/vice-president-enterprise-marketing-hello-heart-united-states-js5tvs3hncr6) — United States
- [Tier 3 Support Engineer](https://feeny.ai/job/tier-3-support-engineer-hello-heart-united-states-1jtcy9s6z4de) — United States