• Oversee compliance for UM and CM to deliver an unmatched patient experience and ensure delegation compliance. • Audit individual charts according to QA Audit Protocols to ensure compliance with program responsibilities and best practices. • Possess knowledge of contractual, accreditation, federal and business requirements for assigned program and ensure compliance with program requirements and develop corrective action plans as needed. • Establish work procedures and processes that support the company and departmental standards, procedures and strategic directives. • Establish workflows that meet compliance requirements and align with organization-wide clinical protocols. • Lead the review of policies and procedures, program descriptions, and evaluations. • Conduct training for new team members and other internal parties as required. • Provide statistical and performance feedback, and coaching on a regular basis to each team member in their assigned region. • Create and maintain a high-quality work environment so team members are motivated to perform at their highest level. • Provide continual evaluation of processes and procedures. • Responsible for suggesting methods to improve area operations, efficiency, and service to both internal and external staff. • Collaborate with other OSH program leaders to implement initiatives in support of integrating delegated services with core OSH care model.

• Process Background Check and Drug Screens according to each client’s requirement • Be responsible for performance of Quality System procedures in relation to job description. • Abide by company regulations, policies, work procedures, and instructions. • Be responsible for completion of new hire sign-up paperwork to Human Resources. • Collect missing onboarding and background documents. • Participate in special projects as assigned.

Role Description Cresta is seeking a passionate individual with solid security engineering experience to support the security & compliance team and enable growing global data protection and cybersecurity efforts. - Lead and manage all customer-facing security conversations, partnering cross-functionally to ensure timely resolution of issues and seamless execution of the security review lifecycle within sales deals. - Perform risk assessments to identify gaps, come up with recommendations, and drive the gaps to remediation. - Streamline and lead SOC 2 Type II, ISO 27001/27701/42001, PCI-DSS, TISAX, HIPAA, and FedRAMP audit processes. - Perform internal audits and keep the necessary documentation updated as required for audits. - Perform gap assessments against new regions and target industry markets to comply with compliance regulations as the company expands. - Conduct new-hire and annual security awareness training to educate personnel and re-iterate security and compliance requirements. - Oversee and continuously improve the vendor risk management framework, ensuring effective identification, assessment, and mitigation of third-party risks. - Establish metrics to track compliance program effectiveness and to report risk. - Interface with both technical (Engineering/Product) and non-technical (Sales/Marketing/Customer Success) teams. - Respond to customer RFIs, questions, audits and technical documentation requests. - Help build our common control framework and drive adoption of the framework within the organization. - Build and automate processes to achieve continuous compliance over the technology control environment. - Assist with sales and marketing materials representing product security and compliance. Qualifications - 4+ years of experience in security governance, IT audit, or security compliance management - 3+ years of program management, with experience in affecting technology decisions - End-to-end experience going through SOC 2 Type II, HITRUST, HIPAA, TISAX, ISO 27001/27701/42001, FedRAMP, and PCI-DSS external audits - Experience in a hands-on technical role, with basic understanding of software implementation and integration - Experience with cloud environments on AWS, GCP, Azure - A track record of building relationships and credibility with business leads, external partners, and regulators through collaborative and independent programs - Experience managing competing efforts and requirements - Experience with fast-growing cloud native SaaS start-ups Requirements - Bonus: Experience with building GRC engineering tooling - Bonus: Experience with AI security frameworks such as AIUC Benefits - Comprehensive medical, dental, and vision coverage with plans to fit you and your family - Flexible PTO to take the time you need, when you need it - Paid parental leave for all new parents welcoming a new child - Retirement savings plan to help you plan for the future - Remote work setup budget to help you create a productive home office - Monthly wellness and communication stipend to keep you connected and balanced - In-office meal program and commuter benefits provided for onsite employees Compensation at Cresta Cresta’s approach to compensation is simple: recognize impact, reward excellence, and invest in our people. We offer competitive, location-based pay that reflects the market and what each individual brings to the table. The posted base salary range represents what we expect to pay for this role in a given location. Final offers are shaped by factors like experience, skills, education, and geography. In addition to base pay, total compensation includes equity and a comprehensive benefits package for you and your family. Salary Range: $160,000 – $180,000 + Offers Equity We have noticed a rise in recruiting impersonations across the industry, where scammers attempt to access candidates' personal and financial information through fake interviews and offers. All Cresta recruiting email communications will always come from the @cresta.ai domain. Any outreach claiming to be from Cresta via other sources should be ignored. If you are uncertain whether you have been contacted by an official Cresta employee, reach out to recruiting@cresta.ai.

• Advising our clients on corporate law, compliance and data protection matters • Drafting, reviewing and negotiating contracts and providing legal support for complex projects • Developing, implementing and further developing compliance management systems • Conducting compliance reviews, data protection audits and data protection impact assessments • Advising on the GDPR, the German Federal Data Protection Act (BDSG) and related regulatory requirements • Drafting and negotiating data protection agreements (e.g., data processing agreements, joint controller agreements and standard contractual clauses) • Managing data protection incidents and communicating with supervisory authorities