• Research and develop internal understandings of various regulatory regimes • Develop and support high-impact strategies for legal and campaign approaches for engaging with regulatory systems • Lead on interventions such as permit challenges, administrative comments, or other filings • Represent CIEL in coalitions, public meetings, workshops, hearings, and press • Propose, draft, and edit reports, briefings, fact sheets, and other materials • Support fundraising efforts and maintain timesheets

• Serves as the primary operational point of contact for assigned Global and Vertical customers. • Responsible for the oversight of Ricoh employees, including both individual contributors and managers. • Engaged from contract concept to full account management. • Facilitates communication with strategic customers to ensure performance standards are met. • Key responsibilities include P&L reconciliation, strategic implementation, employee relations, and customer relationship management.

• Review Vendor contracts, BAAs, and commercial agreements that keep our business running • Research complex telehealth regulations across multiple states • Drafting/revising policies and template contracts and business associate agreements • Support our compliance and privacy initiatives under HIPAA and state privacy laws • Conduct legal research on emerging issues in digital health, telemedicine licensing and AI in healthcare • Special projects including utilizing AI in the Legal Department to create more efficiencies

• Partner with the Director of Enterprise Incident Response to implement and maintain an effective incident response program • Lead the research, management, and resolution of privacy issues presented to the Privacy Office • Design and deliver privacy compliance training programs • Prepare and issue required notifications to clients, business partners, and government regulators in accordance with applicable laws • Monitor the performance of the incident response program while taking appropriate steps to improve its effectiveness • Act as an advisor to the business in all aspects of incident response • Collaborate with other departments including the legal team, to direct compliance issues to appropriate existing channels for investigation and resolution • Respond to cybersecurity and privacy incidents, complaints received from customers, third parties, regulators and areas of the business • Assist with the investigation of such incidents in a consistent, uniform manner • Manage a team of Sr. Analysts responsible for handling day-to-day and large privacy incidents • Collaborate with Privacy Legal and Compliance Operations, IT, Cigna Information Protection, and Enterprise Risk Management • Lead key client relationships to ensure all contractual and costly performance guarantees are met.