• Maintain working knowledge of applicable laws and regulations impacting medical debt collection • Translate regulatory requirements into clear, operationally actionable controls • Support regulatory change management, including tracking changes and performing impact assessments • Assist with regulatory exams and audits by ensuring documentation readiness • Support the success of the internal governance lifecycle, including creation, analysis, and coordination • Ensure proper version control, approvals, and periodic review • Maintain the system of record with appropriate metadata, audit trails, and access controls • Conduct risk assessments on high-risk processes across all internal departments and external partners • Maintain tickets, risk registers, and carry out remediation planning to resolve unique events • Lead preventative and corrective actions as well as work groups and projects from design to completion • Execute monitoring and auditing programs for key compliance areas • Document findings and escalate issues when needed • Track audit findings and transition them to appropriate actions, groups, and projects for completion • Prepare reporting on risks, audit findings, and remediation progress • Maintain audit-ready documentation and supporting work products • Regularly present progress and documentation to internal committees and leadership • Partner with internal department leadership to embed compliance controls • Assist in the development, analysis, and monitoring of issued resources to ensure compliance synergy • Participate in industry growth and development programs to ensure accurate compliance guidance

• Develop a strategic and comprehensive privacy program in alignment with regulatory standards • Establish and enforce policies ensuring the confidentiality of protected health information (PHI) • Manage privacy-related committees and initiatives in coordination with the Vice President and General Counsel and Director of Audit • Provide leadership in training and educating the workforce on privacy matters • Collaborate with IT Security and Information Services to integrate privacy and security programs • Develop and maintain metrics and reports to assess privacy compliance and risk analysis • Monitor compliance activities and assess privacy concerns in coordination with other compliance functions • Oversee compliance of business associates and business associate agreements related to privacy • Manage the process for receiving, investigating, and addressing privacy-related complaints • Ensure timely compliance with breach notifications as per HIPAA and state laws • Conduct information privacy awareness activities and provide training to Baylor Genetics teams • Work on litigation and administrative matters related to privacy issues in coordination with legal counsel • Supervise the Regulatory and Compliance Manager, assigning duties as necessary • Develop strategies to ensure compliance with various regulations like GDPR, FERPA, PCI, among others

• Independently work with clients to prepare compliance documentation, including export, FCC, and NOAA license applications, classification analyses, technology control plans, registration statements, annual and semi-annual reports, and other compliance program documentation. • Train and oversee the work of case assistants on export controls and FCC licensing. • Track regulatory developments, support engagement with regulators, prepare and edit internal guidance, create client alerts, and other substantive non-billable materials. • Support business development efforts through development of pitch materials, attendance at aerospace and defense industry-focused conferences, and development of client alerts related to national security, trade topics and other regulatory matters. • Support other team projects on an as needed basis. • Maintain compliance with all firm policies and procedures.

• Liaise with SAR colleagues to drive plan, organize, compile, progress, track, and submit regulatory submissions on a timely basis and with a consistently high level of quality. • May act as a contact point for translation review of submission documents such as applications, synopses, ICFs, labels, etc. • Maintain country-specific patient information sheet and consent form customization text. • Maintain country-specific drug labeling information and Country Intelligence Pages. • Review and make recommendations on all relevant documentation e.g. labels, patient information sheets, diary cards etc. to comply with ICH GCP & country-specific requirements.