A demonstrated track record at a growth-stage or similarly resource-constrained organization of building or materially rebuilding, not just operating, at least two of: (a) a HIPAA privacy program; (b) an AI governance program, including responsible AI policy design, AI use case review framework, model risk classification, and AI-related product review; and (c) end-to-end privacy incident response, including regulator-facing notification and post-incident remediation. Own Abby Care's privacy program for both patient data and payor data — HIPAA compliance, state privacy and consumer health data law compliance, BAA program, data mapping and ROPA, privacy incident response, breach assessment and notification, and individual rights workflows, including its design, operation, measurement, and continuous improvement.