• Provide business-minded legal guidance to a growing healthcare software company, including around privacy, secure payment and billing practices, information security, intellectual property, and procurement. • Provide guidance on a broad range of privacy and security frameworks, including HIPAA, CCPA/CPRA, and emerging state data privacy laws. • Contract drafting and review in support of Tebra’s business development, operations, products and services. • Partner closely with Product and Engineering teams to conduct legal reviews of new software features, ensuring compliance by design. • Proactive identification, mitigation, and management of legal and compliance risks to the business. • Provide support and legal guidance to ensure Tebra’s compliance with applicable laws, regulatory requirements and Tebra’s policies and procedures. • Oversee response to (i) customer-related subpoena requests from government entities and (ii) customer and patient requests for personal and health information. • Manage customer and vendor escalations and disputes to resolution.

• Lead the strategy for AI transformation across the privacy function, including AI-enabled workflows, automation, knowledge management, legal review controls, and responsible use of approved AI tools • Create legally reviewed guardrails for AI-assisted privacy work, including regulatory monitoring, customer-facing content generation, DSAR triage support, DPIA routing, contract comparison, incident summaries, and privacy knowledge management • Ensure AI-enabled privacy workflows preserve human ownership, legal judgment, privilege protection, source traceability, auditability, data classification rules, and appropriate escalation • Partner with Product Legal, Security, GRC, IT, Legal Operations, and other stakeholders to identify privacy workflows, including vendor reviews, that can be safely automated, delegated, or enhanced through AI • Own the privacy function’s Data Subject Rights operating model, including DSAR governance, workflow design, service levels, templates, quality controls, escalation thresholds, reporting, and continuous improvement • Directly manage the Privacy Operations Specialist, who will remain responsible for day-to-day DSAR execution, operational coordination, tooling, reporting, and alternative legal provider workflow management • Own the strategic relationship with Factor Law and other legal service delivery partners, including scope definition, expansion opportunities, escalation criteria, quality review, performance metrics, and regular business reviews • Partner with the Privacy Operations Specialist, alternative legal provider, IT, and Legal Operations to improve DSAR tooling, automation, intake routing, deadline tracking, case documentation, metrics, and reporting • Develop DSAR playbooks, templates, decision trees, and escalation matrices that enable standard matters to be handled efficiently while preserving attorney control over higher-risk issues • Own the legal strategy for customer-facing privacy trust materials, including white papers, FAQs, trust center content, data processing explainers, AI/privacy narratives, privacy notices, certification summaries, and external privacy claims • Translate CrowdStrike’s privacy posture into clear, accurate, business-friendly materials that support Sales, Customer Success, Commercial Legal, Product, Security, GRC, Marketing, and executive stakeholders • Create a formal review and sign-off model with Marketing Legal and other relevant teams to ensure that customer-facing privacy materials are legally accurate, commercially useful, and supportable • Build a reusable library of privacy trust assets to reduce one-off escalations and help customers understand CrowdStrike’s approach to data protection, AI, telemetry, subprocessors, cross-border transfers, retention, privacy-by-design, security data, and incident handling • Support strategic customer engagements where privacy, AI, incident response, certifications, international transfers, or data-use questions are material to the relationship • Ensure that all external privacy and data-practice claims are accurate, consistent, current, and aligned with CrowdStrike’s contractual, regulatory, and operational reality • Partner with Privacy Leadership, GRC, Security, Compliance, Product, Engineering, and Legal stakeholders to support privacy-related certifications, attestations, audits, customer assurance requests, and control frameworks • Own certifications specific to Privacy, including the Data Privacy Framework, Global CBPR, APEC CBPR/PRP, and related privacy assurance programs, as applicable • Develop a privacy evidence strategy that connects internal controls to external commitments, customer diligence, regulatory expectations, and certification requirements • Create legally reviewed privacy narratives for certification and assurance topics, including cross-border transfers, BCRs, SCCs, APEC CBPRs, subprocessor governance, retention, access controls, incident response, privacy-by-design, consent, and AI governance • Help ensure that customer-facing certification statements and privacy assurance materials are accurate, current, and consistent with internal controls and legal obligations • Serve as a senior privacy legal lead for incidents with actual or potential privacy implications • Partner with CSIRT, Security, Legal, Compliance, Product, Communications, and outside counsel as needed to assess privacy impact, notification obligations, customer commitments, regulatory risk, and remediation requirements • Develop and maintain privacy incident response playbooks, escalation criteria, privilege protocols, documentation standards, decision trees, and post-incident remediation workflows • Advise on whether an incident triggers privacy notification, customer notice, regulator engagement, contractual reporting, or additional investigation • Ensure privacy incident records are accurate, defensible, privilege-aware, and aligned with applicable regulatory and contractual obligations • Lead post-incident privacy reviews to identify control improvements, policy updates, training needs, process changes, product changes, or customer communication improvements

Role Description Our established California roofing and contracting company is seeking a licensed General Building Contractor ("B") to serve as our Responsible Managing Officer (RMO) — the legal and operational qualifier on our corporate license. This is a genuine supervisory role: you'll exercise direct supervision and control over our construction operations as required by California law, in exchange for a monthly fee. Qualifications - A current, clean, active California "B" General Building Contractor license, in good standing with no disciplinary history or unresolved complaints - At least 4 years of journeyman-or-higher experience in the classification (CSLB requirement) - Willingness to be named as a corporate officer on the license - Capacity to actively qualify and supervise — this is not a name-only arrangement Requirements - Exercise direct supervision and control of construction operations per B&P §7068.1 - Review and make technical and administrative decisions as the qualifier - Conduct periodic compliance and workmanship oversight (can be largely remote: document/permit review, project check-ins, scheduled oversight calls) - Be reachable for licensing and code-compliance questions - Help ensure the company operates within CSLB rules Benefits - Contractual officer role, not full-time employment — a defined, manageable time commitment - Formal RMO agreement drafted by our attorney spells out duties, pay, and term - We handle CSLB filings and carry the required $25,000 Bond of Qualifying Individual - You can qualify a maximum of 3 firms total at any time — tell us how many you currently hold - Compensation: $800/month, paid per the signed agreement, plus reimbursement of any agreed expenses. Company Description This is a remote position.

• Manage contract templates (draft, update, and implement processes for effective use). • Draft, review, and negotiate a variety of complex agreements. • Support the sales team in contract negotiations, risk assessment, and strategic decision-making. • Assist the finance team with contract-related debt recovery and risk mitigation. • Oversee compliance, privacy, and regulatory matters, ensuring adherence to applicable laws. • Monitor new regulations and proactively update internal policies and business practices. • Support HR and internal governance, contributing to policies, employment-related legal matters, and training. • Provide quick, practical, and commercially focused legal advice to all teams. • Act as a trusted business partner for different teams, ensuring legal and compliance needs are met. • Draft internal policies and guidelines tailored to different departments. • Develop training materials and workshops on key legal, compliance, and privacy topics.