Role Description atVenu's Compliance & Risk team is seeking an experienced privacy professional to lead and mature our privacy function. As a live event commerce platform handling transaction data for venues, promoters, artists, and fans across North America and expanding in Europe, we operate at the intersection of B2B SaaS and payments. Privacy isn't an afterthought; it's core to how we build and operate. This is a high-impact individual contributor role with real ownership. You'll be atVenu's only dedicated privacy resource, working across Legal, Engineering, Product, and Operations to ensure we're meeting our obligations under GDPR, CCPA/CPRA, PIPEDA, and other applicable frameworks. This is a hands-on role. You'll be expected to: - Draft policies, oversee cookie consent configurations, review contracts, engage with product teams during development, and manage DSARs (low volume). - Think strategically about where the program needs to go. What You’ll Do - Lead the day-to-day operation and continued development of atVenu’s privacy compliance program, including maintaining privacy policies and internal standards. - Champion privacy requirements across new business initiatives from concept through to operation, managing cross-functional stakeholder engagement. - Conduct and manage Data Protection Impact Assessments (DPIAs) for new products, features, integrations, and third-party service providers. - Serve as the company’s subject matter expert on GDPR, CCPA/CPRA, PIPEDA, and emerging privacy regulations. - Partner with Legal to review and negotiate data processing agreements (DPAs), vendor contracts, and other agreements with privacy implications. - Manage and maintain atVenu’s OneTrust Cookie Consent implementation. - Review customer agreements and data-related contractual obligations. - Monitor ongoing data practices to ensure customer data is used consistently with contractual commitments. - Work with Engineering and Product teams to embed privacy-by-design principles into the development lifecycle. - Manage and respond to data subject access requests (DSARs) and privacy inquiries. - Lead the privacy workstream during incidents, including conducting privacy impact assessments. - Assess the privacy implications of AI and machine learning systems. - Monitor the evolving regulatory landscape and assess the impact of new or amended privacy laws. - Cultivate a lasting privacy-aware culture by designing and delivering training. Qualifications - 8+ years of hands-on privacy compliance experience, ideally in a B2B SaaS, fintech, or payments environment. - Deep, practical knowledge of GDPR, CCPA/CPRA, and PIPEDA. - Proven experience conducting DPIAs and translating findings into actionable risk mitigations. - Experience reviewing and negotiating data processing agreements and vendor contracts. - Strong project management skills, with a demonstrated ability to own a program. - Experience assessing the privacy and compliance risks of AI and machine learning systems. - Familiarity with information security principles and how privacy and security controls intersect. - Experience reviewing commercial contracts or data agreements. - Excellent communication skills and the ability to translate complex regulatory requirements. - Comfortable operating in a lean, fast-moving organization. - A pragmatic and collaborative approach that balances rigour with business reality. Nice to Have - IAPP certification (CIPP/E, CIPP/C, CIPP/US, CIPM, or CIPT). - Experience with OneTrust (specifically Cookie Consent). - Experience managing privacy controls in a GRC platform like Vanta. - Experience supporting external audits and responding to customer assurance requests. - Exposure to regulatory compliance programs beyond privacy (e.g., SOC 2, PCI-DSS, ISO 27001, ISO 42001).

• This position is responsible for coordination and execution of provider network regulatory deliverables and compliance activities, including oversight of reporting processes, submission timelines and regulatory requirements. • The role partners with internal stakeholders to ensure accurate, timely and compliant submissions, including Behavioral Health network reporting, performance improvement and regulatory readiness. • Performs daily troubleshooting to ensure and provide timely responses to agency inquiries and requests, coordinating with relevant departments and stakeholders for resolution of objections from regulatory entity. • Develops project status reports and business requirements for internal stakeholders on a regular basis. • Develops and maintains model to assess and monitor Community Health Plan network development strategies, ensuring alignment with organizational goals. • Collaborates with subject matter experts to track key performance indicators, identify trends and recommend interventions for network improvement. • Analyzes demographic and utilization data to support regulatory filings and identify opportunities for network expansion. • Sub-division coordination and planning of TEAMonitor narratives, supporting documentation, timelines, communications and QA processes. • Monitor Behavioral Health network and outreach in support of Quarterly HCA Provider Network Submission, to include regular review of geographic/service coverage of Behavioral Health Agencies. • Maintains Behavioral Health AADR process and project plan development quarterly in alignment with contract department review. • Develops of Mental Health Assessment utilizing claims information and compilation of data sets to support analysis. • Coordinates resolution of contracting provider data gaps impacting regulatory submissions, ensuring reliability, completeness, consistency and compliance. • Develops and maintains processes to track and manage regulatory deliverables, resolving issues to ensure accuracy of narratives and data submissions, to include TEAMonitor coordination and HCA contract reviews. • Collaborates across departments and teams to initiate and deliver projects that advance network strategy and fosters interdepartmental partnerships.

US Regulatory Affairs Specialist Locations - Melville - New York - NC Remote, USA - FL Remote, USA - SC Remote, USA - GA Remote, USA - NH Remote, USA - NJ Remote, USA - MA Remote, USA - CT Remote, USA - NY Remote, USA - MD Remote, USA - ME Remote, USA - WV Remote, USA - DC Remote, USA - DE Remote, USA - RI Remote, USA - PA Remote, USA - VA Remote, USA - VT Remote, USA Full time JOB OVERVIEW: Responsible for ensuring company operations remain compliant with all federal, state, and international regulations governing controlled substances and regulated products. This role oversees licensing, reporting, recordkeeping, audits, and internal compliance processes related to DEA and other regulatory agency requirements. The position partners cross-functionally with quality, operations, supply chain, legal, and commercial teams to support compliant business practices while minimizing regulatory risk. KEY RESPONSIBILITIES: May perform several of the responsibilities below: - Research and analyze applicable laws and regulations; develop and implement the necessary policies and procedures to ensure the Company’s ongoing compliance with Federal, State and local requirements. - Implement systems and processes needed to ensure compliance with the receipt, storage and distribution of controlled substances, list 1 chemicals and other regulated products; as well as tracking distribution of prescription drugs and medical devices. - Conduct periodic audits on facilities and customer site visits to assess levels of compliance and risk. - Monitor compliance with DOT requirements for the classification, storage and distribution of Hazardous Materials; as well as the activities to comply with environmental laws, including the registration and disposal of pesticides and other type of type of chemical products. - Coordinate the implementation of systems and procedures to ensure compliance with OSHA regulations. - Support Distribution Center management and designated staff on the actions necessary to maintain regulatory compliance. - Provide support during government inspections and formulating the appropriate response and corrective actions. - Provide guidance to the company and subsidiaries to perform actions in order to maintain regulatory compliance for various facilities. - Provide support to Corporate Brand Development Group and other Business Units researching issues pertaining to regulatory matters.Secure and maintain proper company licensure and product registration as needed to supports HSI Operations and Business Units. - Provide support in the coordination and conducting routine Regulatory audits of Henry Schein facilities, affiliates and subsidiaries. - Develop appropriate awareness and training programs for TSMs consistent with regulatory compliance policies and procedures. - Conduct routine Regulatory audits of Henry Schein facilities, affiliates and subsidiaries. - Participate in special projects and performs other duties as required. SPECIFIC KNOWLEDGE & SKILLS: - Understanding of regulations applicable to HS operations. GENERAL SKILLS & COMPETENCIES: - General proficiency with tools, systems, and procedures - Basic planning/organizational skills and techniques - Basic analysis and problem-solving skills - Basic verbal and written communication skills MINIMUM WORK EXPERIENCE: Typically 1 to 3 years of related professional experience. PREFERRED EDUCATION: Typically, a Bachelor's Degree or global equivalent in related discipline. TRAVEL / PHYSICAL DEMANDS: Travel typically less than 10%. Office environment. No special physical demands required. The posted range for this position is $61,812-$84,992, which is the expected starting base salary range for an employee who is new to the role to fully proficient in the role. Many factors go into determining employee pay within the posted range including prior experience, current skills, location/labor market, internal equity, etc. This position is eligible for a bonus not reflected in the posted range. Other benefits available include: Medical, Dental and Vision Coverage, 401K Plan with Company Match, PTO, Paid Parental Leave, Income Protection, Work Life Assistance Program, Flexible Spending Accounts, Educational Benefits, Worldwide Scholarship Program and Volunteer Opportunities.

• Serve as the primary compliance liaison for Care Management and Utilization Management operations, providing strategic guidance and oversight to ensure adherence to applicable regulatory and accreditation requirements • Interpret, assess, and operationalize regulatory standards, including CMS Medicare Advantage and Managed Care requirements, NCQA and URAC accreditation standards, Utilization Review and Utilization Management regulations, and 42 CFR Part 2 requirements, as applicable • Oversee and support the organization’s multi-state Utilization Management licensing program by tracking licensing requirements across applicable jurisdictions, coordinating license applications and renewals, maintaining supporting documentation, and partnering with operational leaders to ensure ongoing compliance with licensing conditions and regulatory obligations • Provide compliance guidance and subject matter expertise related to clinical workflows, operational processes, policy development, and system implementations impacting Care operations • Support the full lifecycle management of Care-related policies, standard operating procedures, and associated documentation • Monitor regulatory developments and emerging compliance requirements, evaluate operational impact, and communicate relevant updates and recommendations to key stakeholders • Participate in high-risk initiatives, operational enhancements, and product or process changes to ensure compliance considerations are appropriately addressed • Support organizational readiness for audits, regulatory reviews, and accreditation activities, including NCQA and URAC surveys • Assist with incident response activities involving Care operations, including privacy-related inquiries, compliance investigations, and regulatory escalations • Collaborate with Corporate Compliance and cross-functional teams on issue intake, triage, tracking, remediation, and resolution efforts • Provide education, training, and ongoing guidance to internal stakeholders regarding applicable regulatory and compliance requirements • Maintain accurate and organized documentation to support compliance activities, regulatory inquiries, audits, and accreditation requirements