Attorney – Leader of Health Care, Regulatory & Compliance

• About Henry Meds:
• Henry Meds is a direct-to-consumer telehealth company on a mission to create a world where everyone has the health to live fully– regardless of insurance status or plan. As a telehealth organization delivering virtual health care to patients in 40 states and DC through a professional corporation–management services organization (“PC-MSO”) model, clinical care is delivered by physician-owned professional entities, and Henry Meds provides administrative, technology, and business support services under management services agreements.

We’re headquartered in Las Vegas, Nevada, with a largely remote U.S. team. We work under a guiding principle that puts patients first, driven by five values: Integrity Always, Own It, Be Relentless, Stay Curious, and Win Together. We are driven to fulfil our mission and create a great place to work.

Position Overview:

Henry Meds is looking for a resourceful health care regulatory attorney to join our team and help guide the company through the complex, fast-moving intersection of telehealth, pharmacy, and digital health regulation. This is a high-impact, largely autonomous role: you’ll be the go-to regulatory resource for teams across the business, from care operations, medical affairs, pharmacy, to product/engineering, growth, and people, as they build and scale a compliant, multi-state care delivery model. In this role, you will build out Henry Meds’ compliance program while also serving as a trusted legal advisor to the business. Given the company’s current stage, legal and compliance are combined in a single department; as Henry Meds grows, this leader will be responsible for guiding the separation of these functions into distinct legal and compliance roles, consistent with industry guidance and best practices. This role has broad ownership of the health care regulatory function, providing the legal and regulatory expertise.

In this role, you will be the company’s definitive internal authority on healthcare regulatory matters and will be the primary architect of the compliance program’s substance: its policies, training, risk assessment, and monitoring content. The PC-MSO structure is the legal foundation of the business, and its integrity is a daily operating discipline rather than a one-time structuring exercise. With states tightening rules on management company control of clinical entities, and telehealth rules on prescribing, licensure, and consumer health data continuing to shift, we need an attorney who can keep the company both compliant and fast-moving, building guardrails that enable growth.

Subject Matter Knowledge

Depth is expected in structural and clinical regulation (CPOM and fee-splitting, MSA design and fair market value, professional entity governance, state MSO transparency and transaction notice laws, medical board authority, scope of practice, credentialing and peer review, telehealth practice standards, informed consent, and licensure compacts) and in telehealth operations and data (Ryan Haight and DEA prescribing, PDMP and e-prescribing, pharmacy and compounding, HIPAA, 42 C.F.R. Part 2, state consumer health data and privacy laws, FTC Act Section 5, tracking technology, TCPA, and AI governance). We have no current government reimbursement, but working literacy in fraud and abuse — AKS, Stark, EKRA, CMP, False Claims Act, OIG guidance, and exclusion screening, is helpful.

Working Style

We are looking for judgment over recitation, a clear recommendation with a stated risk posture, not a survey of considerations, along with enough business fluency to find the compliant path rather than only identify the non-compliant one, a builder’s instinct for a program that does not yet exist, credibility with clinicians, the backbone to hold the line with senior leadership where the structure or patient safety requires it, and writing that non-lawyers can act on without follow-up.

Duties and Responsibilities:

Compliance program. Build and run an effective program aligned with the seven elements and current OIG guidance: policies and SOPs, role-based training, confidential reporting and investigations, risk assessments and an annual work plan, monitoring and auditing licensure, and DEA verification and vendor diligence findings.

PC-MSO structure and corporate practice of medicine (CPOM). Own the legal integrity of the structure in every state of operation, including CPOM, fee-splitting, and lay control of clinical decision-making. Draft and re-paper management services agreements, administer the affiliated professional entities, hold the clinical/administrative line, train non-clinical leadership on how to operate and communicate within the structure, and manage state MSO transparency and transaction-notification filings with outside counsel.

Regulatory strategy and advisory. Advise product, clinical, growth, engineering, and operations early enough to shape new products, care models, protocols, and pricing rather than block launch. Maintain the state-by-state telehealth matrix, position papers, and risk register, and translate legislative and enforcement developments into prioritized action with owners and deadlines.

Clinical workforce. Advise on multi-state licensure strategy and compacts, scope of practice and supervision requirements for advanced practice clinicians, credentialing and peer review, clinician contracting and compensation, and adverse event, board complaint, and NPDB matters.

Prescribing and pharmacy. Own Ryan Haight Act and DEA telemedicine prescribing compliance, including readiness for the anticipated special registration framework. Advise on state prescribing rules, pharmacy and 503A/503B compounding relationships, FDA-regulated promotional and software touchpoints, and requirements imposed by LegitScript, payment processors, and advertising platforms.

Privacy and data. Serve as Privacy Office function for HIPAA, state consumer health data laws, FTC Act Section 5, and tracking-technology exposure. n the BAA program, breach risk assessments, and OCR reporting, and on PC–MSO data flows, TCPA and CAN-SPAM outreach rules, and AI and clinical algorithm governance.

Marketing, fraud, and abuse. Review advertising claims, testimonials, influencer and affiliate arrangements, website terms, consent flows, and auto-renewal compliance against FTC and state law, and structure referral relationships, patient acquisition channels, discount and waiver programs, and clinician and sales compensation to manage fraud and abuse exposure.

Contracting and external interactions. Draft and negotiate the healthcare-regulated contract set and support state expansion through go-live sign-off. Serve as primary contact for medical boards, health departments, attorneys general, DEA, and OCR, and manage outside counsel vendor stack

You will likely have:

J.D. and active bar membership in good standing in at least one U.S. jurisdiction, with eligibility to serve as in-house counsel in Nevada.

6–8+ years of healthcare regulatory experience at a top healthcare regulatory practice, an AmLaw firm’s healthcare group, or in-house at a provider, digital health, or payer organization.

Direct, hands-on experience with PC-MSO / friendly PC structures, building, papering, defending, or operating them, plus command of CPOM and fee-splitting doctrines, telehealth practice and modality rules, multi-state licensure, HIPAA, AKS, and state medical board regulation.

Experience advising on or materially contributing to a healthcare compliance program, and a track record of clear, decisive, risk-calibrated guidance for fast-moving commercial teams.

Preferred Qualifications

Digital health experience through a period of multi-state expansion;

DEA telemedicine prescribing and controlled substance workflows;

State MSO oversight, ownership transparency, and transaction notification regimes;

Prior service as Chief Compliance Officer or Privacy Officer;

Government inves