The Compliance & Policy Manager ensures that both LoopRoots Foundation (nonprofit) and LoopTroop Inc. (social enterprise) maintain full compliance with federal, state, and program regulations.
This position will oversee data protection, licensing, nonprofit governance, and legal documentation to protect the organization’s integrity and ensure all operations meet ethical and regulatory standards.
Key Responsibilities
- Nonprofit (LoopRoots Foundation) Compliance
- Ensure 501(c)(3) compliance with IRS and state charitable registration laws
- Maintain state charity filings (MD, AZ, PA, NM, CA, VA, etc.)
- Track annual reporting deadlines (IRS Form 990, charitable renewals)
- Review program policies for HIPAA, CJIS, and privacy compliance
- Manage grant compliance documentation and donor acknowledgment protocols
- Corporate (LoopTroop Inc.) Compliance
- Oversee business licenses, rideshare/TNC registrations, and state filings
- Ensure vendor and driver documentation (insurance, background checks) align with company standards
- Support contract reviews and ensure service-level compliance across partnerships (Stripe, Checkr, Twilio, etc.)
- Review employment and volunteer policies for legal accuracy
- Data Protection & Privacy
- Maintain data retention schedules and ensure GDPR/HIPAA-like standards for sensitive data
- Work with tech teams to enforce privacy and encryption protocols (LoopTalk, LoopFood, LoopLegal)
- Audit access logs, user consent systems, and data deletion workflows
- Internal Policy Development
- Draft and update internal policy manuals (Data Security Policy, Non-Discrimination Policy, Code of Conduct)
- Ensure all program teams (Food, Legal, Housing) follow correct data-sharing and recordkeeping procedures
- Conduct quarterly compliance reviews and report findings to Marketta and Victoria
Reporting Structure
- Reports to: Marketta Kirby (Executive Director)
- Works closely with: Legal Aid Program Manager (Rifat Sultan Sipra), Program Managers, and Admin Team (Victoria Isaac)
Initial Deliverables (First 60 Days)
- Create a Compliance Tracker Sheet with all federal and state requirements.
- Review and finalize Data Privacy & Retention Policy for both entities.
- Conduct a compliance audit of LoopTroop app integrations (Stripe, Checkr, Twilio, Zoho).
- Draft a unified Volunteer Code of Conduct & Confidentiality Agreement.
- Create a policy document storage system in Zoho WorkDrive.
Qualifications
- Background in legal, nonprofit management, or corporate governance
- Understanding of 501(c)(3) and social enterprise compliance
- Detail-oriented with strong organizational skills
- Familiar with privacy laws (HIPAA, GDPR, or CJIS preferred)