Role Description Cuvo is building the infrastructure that enables non-physician operators to legally own telehealth brands. We've developed a compliant three-entity MSO framework that solves Corporate Practice of Medicine and Anti-Kickback challenges; the same legal structure used in $150+ billion of private equity healthcare transactions. As we scale our platform to support Brand Partners across all 50 states, we're seeking a Senior Compliance Analyst to ensure our legal framework remains bulletproof as we grow. This role sits at the intersection of healthcare law, regulatory compliance, and rapid business growth. You'll work directly with our legal counsel, physician leadership, and Brand Partner operations to maintain the structural separation and Fair Market Value principles that keep our entire ecosystem compliant. Tasks - Regulatory Compliance & Monitoring: - Monitor federal and state healthcare regulations affecting MSO structures, Corporate Practice of Medicine (CPOM) doctrine, Anti-Kickback Statute, Stark Law, and telemedicine requirements across all 50 states. - Track OIG advisory opinions, CMS guidance, DEA regulations for controlled substances, and state medical board updates. - Maintain compliance calendar tracking regulatory deadlines, license renewals, and credentialing requirements. - Conduct quarterly compliance audits of Brand Partner agreements, IMG structures, and payment methodologies. - Fair Market Value & Anti-Kickback Compliance: - Review and validate Fair Market Value (FMV) compensation structures for physician services. - Coordinate with independent third-party valuators to establish and document FMV rates. - Audit payment flows to ensure outcome-independent compensation (prescribe vs. no-prescribe scenarios). - Document safe harbor compliance under 42 C.F.R. § 1001.952(d)(1) for all MSO arrangements. - State-by-State Compliance: - Maintain compliance matrices for CPOM requirements in strict states (CA, TX, NY, IL, OH, NJ). - Track state-specific telemedicine regulations and physician licensing requirements. - Review state medical practice acts and corporate structure requirements. - Coordinate with state healthcare attorneys on jurisdiction-specific issues. - Documentation & Agreement Review: - Review Brand Partner Agreements, Management Services Agreements, and Business Associate Agreements for compliance. - Ensure clinical autonomy provisions are properly documented and maintained. - Audit physician employment agreements within IMG structure. - Maintain compliance documentation library and audit trail. - Physician Credentialing & Licensing: - Oversee 50-state physician licensing and credentialing processes. - Track DEA registrations for controlled substance prescribing authority. - Monitor medical malpractice insurance coverage and limits. - Coordinate with IMG medical director on physician compliance issues. - Brand Partner Compliance Support: - Develop compliance guidance materials for Brand Partners on marketing claims, HIPAA requirements, and prohibited activities. - Conduct onboarding compliance training for new Brand Partners. - Investigate potential compliance violations and recommend corrective actions. - Provide guidance on structural separation between business and medical operations. - Reporting & Risk Management: - Prepare quarterly compliance reports for executive leadership. - Identify compliance risks and develop mitigation strategies. - Maintain compliance metrics dashboard (audit findings, license expirations, agreement renewals). - Coordinate with external healthcare law firms on complex compliance questions. Qualifications - Bachelor's degree in Healthcare Administration, Public Health, Legal Studies, or related field. - 5+ years of healthcare compliance experience, preferably with MSO structures, physician groups, or telehealth companies. - Deep understanding of Corporate Practice of Medicine doctrine, Anti-Kickback Statute, Stark Law, and HIPAA regulations. - Experience with state-by-state healthcare regulatory variations and multi-state compliance. - Proven track record conducting compliance audits and developing compliance programs. - Strong understanding of Fair Market Value methodologies in healthcare arrangements. Requirements - Master's degree in Healthcare Administration (MHA), Public Health (MPH), or related field (preferred). - Certified in Healthcare Compliance (CHC) or Certified Professional Compliance Officer (CPCO) (preferred). - Experience with telemedicine regulatory compliance and Ryan Haight Act requirements (preferred). - Background working with private equity healthcare transactions or MSO structures (preferred). - Experience with physician credentialing and state medical board regulations (preferred). - Familiarity with OIG advisory opinions and healthcare fraud enforcement trends (preferred). Benefits - Competitive base salary commensurate with experience. - Performance-based bonus structure. - Equity participation in high-growth healthcare infrastructure company. - Comprehensive health, dental, and vision insurance (company covers 100% of employee premiums). - Flexible Spending Account (FSA) and Health Savings Account (HSA) options. - Mental health support and wellness programs. - Access to company telehealth services. - Fully remote position (work from anywhere in the US). - Flexible working hours with core collaboration times. - Unlimited PTO policy with minimum 3 weeks encouraged. - Paid parental leave. - Annual budget for compliance certifications, conferences, and continuing education. - Opportunity to work with top-tier healthcare law firms (Jones Day, K&L Gates, Hall Render). - Exposure to cutting-edge healthcare regulatory issues at intersection of telehealth, MSO structures, and digital health. - Direct access to executive leadership and strategic decision-making.

Role Description Reporting to the Director Risk Management, the Senior Vendor Risk Analyst is responsible for assessing third-party risk exposure and supporting the organization’s vendor risk management program. This role evaluates vendors across multiple risk domains, coordinates cross-functional assessments, and ensures higher-risk findings are appropriately escalated. The position also supports broader enterprise risk management efforts by aligning third-party reviews with organizational risk standards and preparing clear, well-supported risk documentation. If you are located in Draper, UT, Eden Prairie, MN, Washington DC, or New York City, NY, you will have the flexibility to work remotely* as you take on some tough challenges. Primary Responsibilities: - Review vendor information to assess risk exposure and assign appropriate risk ratings in accordance with established assessment criteria. - Analyze and report on vendor risk across multiple dimensions, including information security, financial, geographic, operational, regulatory, and technology risk. - Coordinate vendor risk assessments by partnering with subject matter experts and vendor managers to ensure thorough, accurate, and timely completion. - Escalate higher-risk findings when additional due diligence, mitigation planning, or supplemental assessments are required. - Collaborate with internal stakeholders to gather supporting documentation, clarify risk factors, and facilitate timely assessment outcomes. - Support enterprise risk management objectives by aligning third-party risk reviews with broader organizational risk standards and frameworks. - Prepare Vendor Risk Papers that provide detailed analysis of financial, operational, regulatory, and technology-related risks. - Strong written and verbal communication skills, with the ability to work effectively across cross-functional teams. Qualifications - 5+ years of experience assessing vendor or third-party risk. - Solid understanding of vendor risk management principles, including second-line frameworks related to third-party risk oversight. - Familiarity with industry compliance standards and frameworks, including ISO 27001, SIG, and SOC 2. - Proven solid ability to read and analyze financial statements as part of risk evaluation and due diligence. Requirements - Bachelor’s degree or 5+ years of experience in third-party or vendor risk management within the banking industry. - 2+ years of experience with eGRC Archer. - Experience contributing to the development of materials and reports for senior and executive management, including Board and management-level committees. - Experience working collaboratively with internal stakeholders, subject matter experts, and vendor managers. - Knowledge of control and risk identification, with the ability to assess the strength of controls across multiple risk factors in complex environments and systems. - Thorough understanding of risk management policies, best practices, and relevant certifications. - Proven relationship management skills, including the ability to engage effectively with stakeholders, customers, and vendors, and to build strong professional networks. - Proven ability to assess and evaluate AI-related risks and controls within third-party relationships, including awareness of AI tools, automated decision-making, and emerging AI regulatory requirements. - Proven ability to synthesize complex risk information into clear, concise, and actionable documentation. - Proven organizational skills, including the ability to successfully manage multiple concurrent priorities. Benefits - Comprehensive benefits package. - Incentive and recognition programs. - Equity stock purchase. - 401k contribution (all benefits are subject to eligibility requirements).

Title: Principal, Regulatory Affairs Specialist Location: US, Boulder, New York Job Description: Are you ready to accelerate your potential and make a real difference within life sciences, diagnostics and biotechnology? At Integrated DNA Technologies (IDT), one of Danaher’s 15+ operating companies, our work saves lives—and we’re all united by a shared commitment to innovate for tangible impact. You’ll thrive in a culture of belonging where you and your unique viewpoint matter. And by harnessing Danaher’s system of continuous improvement, you help turn ideas into impact – innovating at the speed of life. Our team at Integrated DNA Technologies (IDT), is united by a commitment to collaboration and scientific excellence, building on a strong foundation of innovation, expertise, and reliability. Guided by our vision to help researchers rapidly move from the lab to life-changing advances, we work closely with global partners to accelerate progress and genomics breakthroughs across fields like cancer, infectious disease, rare genetic disorders, and more. At IDT, you’ll be part of a culture rooted in continuous learning and improvement—where your growth fuels our mission to accelerate the pace of genomics and helps shape a healthier, brighter future for all. The Principal Regulatory Affairs Specialist is responsible for developing and executing strategies for global market introduction of new and modified IVD medical devices and software while acting as a SME within the Global Regulatory team and providing mentorship to entry-level and intermediate associates. This position reports to the Manager, Regulatory Affairs and is part of the Regulatory Affairs team located in Boulder, CO and will be fully remote. In this role, you will have the opportunity to: - Author and lead the creation of regulatory documents (regulatory submissions/filings, registration and listing, technical files, etc.) to obtain global approvals to commercially distribute products; collaborates with international colleagues in global regions to submit application/registration documents. - Provide guidance and approve regulatory/quality documentation related to new product development deliverables acting as core team member conducting regulatory assessments related to design changes, advising and approving protocols, reports, marketing material, etc. - Assess risk levels associated with current and emerging regulatory issues, providing guidance to facilitate and ensure practices are consistent with the corporate guidance and SOPs; interpret new and/or existing regulatory requirements ensuring compliance with applicable agency requirements, published standards, local procedures and project specific plans. The essential requirements of the job include: Education, Licensure, Certification, Registration - Bachelor’s degree in a technical field such as chemistry, biochemistry, biology, or related Professional Experience: - Minimum 7 years of experience in regulated environment required; 4+ years of global regulatory experience related to in vitro diagnostics required. - Knowledge and experience in U.S. FDA and EU IVD regulations; with proven experience in submission of PMA, de novo, 510(k) and/or technical files required. - Experience and understanding of product development process inclusive of Design Control and Risk Management; broad knowledge and previous application of ISO 13485, IVDR, and 21 CFR Part 820 required. It would be a plus if you also possess previous experience in: - Strong collaborative facilitation skills with the ability to build consensus while championing global regulatory compliance. - Ability to work independently utilizing developed research and analytical skills to manage multiple projects. - Must be a strong collaborative facilitator and leader, building consensus while championing global regulatory compliance IDT, a Danaher operating company, offers a broad array of comprehensive, competitive benefit programs that add value to our lives. Whether it’s a health care program or paid time off, our programs contribute to life beyond the job. At IDT we believe in designing a better, more sustainable workforce. We recognize the benefits of flexible, remote working arrangements for eligible roles and are committed to providing enriching careers, no matter the work arrangement. This position is eligible for a remote work arrangement in which you can work remotely from your home. Additional information about this remote work arrangement will be provided by your interview team. Explore the flexibility and challenge that working for IDT can provide. The annual salary range for this role is $110,000 -$135,000. This is the range that we in good faith believe is the range of possible compensation for this role at the time of this posting. This job is also eligible for bonus/incentive pay. We offer comprehensive package of benefits including paid time off, medical/dental/vision insurance and 401(k) to eligible employees. Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, benefits, or any other form of compensation and benefits that are allocable to a particular employee remains in the Company's sole discretion unless and until paid and may be modified at the Company’s sole discretion, consistent with the law. #LI-LCS Join our winning team today. Together, we’ll accelerate the real-life impact of tomorrow’s science and technology. We partner with customers across the globe to help them solve their most complex challenges, architecting solutions that bring the power of science to life. Danaher Corporation and all Danaher Companies are committed to equal opportunity regardless of race, color, national origin, religion, sex, age, marital status, disability, veteran status, sexual orientation, gender identity, or other characteristics protected by law.

• Analyze regulatory technical standards, design SOPs based on regulatory requirements, and coordinate with key stakeholders. • Provide advice, objective reviews, and challenges to ensure that key operational risks are adequately and effectively identified, assessed, and managed in both business-as-usual activities and new initiatives, products, and processes. • Conduct independent assessments and daily monitoring of operations based on the regulated entity’s rulebooks, assessing whether there are systemic or thematic risk concerns that warrant deeper analysis and escalation to senior management. • Monitor regular operational cycles, validate results, and continuously improve operational processes. • Periodically audit operational results, processes, and public information to identify potential regulatory and compliance risks. • Coordinate with different teams to prepare periodic and ad-hoc notifications to regulators, and maintain accurate records of key decisions and operational outcomes.