About Us

At SimplePractice, we are improving access to quality care by equipping health and wellness clinicians with all the tools they need to thrive in private practice.

More than 250,000 providers trust SimplePractice to build their business through our industry-leading software with powerful tools that simplify every part of practice management. From admin work to clinical care, our suite of innovative solutions work together to reduce administrative burden—empowering solo and small group practitioners to thrive alongside their clients.

Award-winning and people-first, SimplePractice is shaping the future of health tech. In 2026, we were recognized by BuiltIn as a Best Remote Company to Work For, Software Guru's Best Places to Code, Becker Healthcare Telehealth Companies to Know, and we won a MedTech Breakthrough Award for Best Practice Management Solution Provider.

Role

You will manage the end-to-end operating model for fraud, payments underwriting, and platform abuse across the full customer lifecycle: pre-onboarding and KYB/KYC, payments underwriting and approval decisioning, transaction and payout monitoring, bank-change and account-takeover controls, disputes and chargeback strategy, reserves and holds, spam and platform abuse containment, and account decisions across approval, holds, re-enablement, termination, and deletion. You'll report to the Chief Legal Officer and work in close partnership with our CISO and Product/Engineering leadership. This is a strategy and program-ownership role: you'll set direction and represent our fraud posture to the executive team, while a team of analysts and leads runs the day-to-day operations you design.

What You'll Own

Strategy and risk appetite

Own SimplePractice's fraud and payments risk appetite — loss tolerance in basis points of payment volume, acceptable false-positive and review rates, review and verification requirements, approval-rate targets by segment. You propose it, you drive executive alignment on the tradeoffs those numbers encode, and you are the decision-maker on policy changes within it.

Build the roadmap for the function across policy, data, tooling, modeling, automation, and org design. Sequence it so early wins fund later investment.
Move policy from documented practice to governed artifact: versioned rules and thresholds, backtested before deployment, shadow-run or champion/challenger tested where exposure warrants it, with an auditable decision trail showing which policy version and which signals drove any given outcome.
Set the standard for how emerging attack patterns get from first detection to deployed control, and shrink that cycle time deliberately.

Underwriting and onboarding risk

Own payments underwriting and KYB/KYC decisioning end to end — policy, thresholds, data sources, verification requirements, escalation paths, and the conversion-versus-risk tradeoff at each gate.
Build risk-tiered onboarding: automated approval for the clean majority, proportionate friction for the ambiguous middle, real scrutiny reserved for genuine signal.
Own reserves, holds, and payout-timing policy as credit and exposure decisions, not just fraud decisions. Size them at portfolio level with a defensible methodology.
Maintain card network and ACH program compliance — Visa VAMP, Mastercard ECP, Nacha return-rate thresholds — and keep us well inside them, including the Nacha fraud-monitoring obligations that reached all originators in 2026.

Fraud operations and detection

Run fraud operations to explicit SLAs on throughput, accuracy, and time-to-contain, with capacity modeling and workforce planning rather than reactive hiring.
Drive automation and AI-assisted triage into the review pipeline to reduce manual touch volume, and hold yourself to a measurable cost-per-decision trend, not just a loss number.
Own the risk policy and configuration layer of the detection stack — rules, scoring thresholds, identity and device signals, case management, queue design — under a shared administration model with Product and Engineering, who own the underlying platform. Define the boundary clearly and make it work.