• Serve as the primary SME for Canadian CBSA regulations, customs processes, and entry filing requirements. • Act as the main client-facing contact, providing guidance, answering inquiries, and ensuring a high-quality service experience. • Analyze and interpret data, documentation, and regulatory information to support compliant decision-making. • Manage and execute multiple projects of moderate complexity, ensuring deliverables are completed accurately and on schedule. • Develop, track, and present metrics and performance insights to clients and internal stakeholders. • Identify compliance risks, recommend corrective actions, and support continuous improvement initiatives. • Collaborate cross-functionally with operations, compliance, and regulatory teams to resolve issues and enhance processes. • Stay current on regulatory changes, CBSA updates, and industry best practices, proactively advising clients and internal teams.

• Serve as a key coordination point between Clinical Operations, Legal, Compliance, Licensing, and business stakeholders. • Interpret regulatory updates and translate them into clear operational guidance. • Support utilization review and clinical pharmacy compliance activities. • Coordinate audit and accreditation readiness. • Ensure regulatory communications, documentation, appeals, complaints, and operational processes are accurate and vetted.

Role Description Regulatory Assistant to provide support to assure research protocols are in compliance with university, state and federal regulations across research groups managed by the Clinical Trials Office (CTO). - Assists with regulatory functions in support of clinical research activity. - Assists in preparation of protocol submissions to Institutional Review Boards (IRBs) and provides updates on submission status. - Assists in preparation of other required regulatory documents. - Distributes approved documents. - Relays information to clinical research staff. - Assists with data entry including collecting, entering and maintaining data and documents in the OnCore electronic database. - Assists with monitoring visits. - Assists with regulatory issues. - Creates and maintains regulatory files. Qualifications - Bachelor's degree, preferably in biological sciences, health sciences, or life sciences or equivalent combination of education and experience required. - Experience in a clinical research capacity desired. - Computer skills required with knowledge of database software applications desired. Requirements - Final candidates are subject to successful completion of a background check. - A drug screen or physical may be required during the post offer process. Company Description As one of only 50 designated comprehensive cancer centers in the nation, The Ohio State University Comprehensive Cancer Center – Arthur G. James Cancer Hospital and Richard J. Solove Research Institute is dedicated to the creation of knowledge in laboratory, clinical and population-based cancer research. We apply those discoveries to develop more effective approaches to cancer prevention, diagnosis, and therapies – providing tomorrow’s standard of care today. A Cancer-Free World Begins Here.

Role Description The Compliance Analyst supports Health Gorilla’s compliance program by helping ensure adherence to TEFCA, HIPAA, information blocking regulations, data governance requirements, and other federal and state healthcare regulations. The role works closely with Legal, Security, Product, Engineering, Operations, and Data teams to monitor compliance, conduct investigations, support audits, and identify compliance risks across Health Gorilla’s interoperability platforms. If you are a compliance professional who is passionate about healthcare interoperability, data governance, emerging technologies, and regulatory compliance, this role is for you! What you will do at Health Gorilla - Compliance Monitoring & Investigations - Conduct compliance monitoring activities to identify potential risks, anomalies, or policy violations. - Review system activity, access logs, data exchange activity, and operational workflows for compliance concerns. - Assist with investigations involving privacy, security, TEFCA, participant compliance, or data-use concerns. - Document findings, recommend corrective actions, and track remediation efforts. - Data Analytics & Compliance Reporting - Utilize Databricks, SQL, or similar analytical platforms to support compliance reviews, audits, and investigations. - Develop and execute queries or leverage modern tools to analyze data exchange activity, access patterns, user behavior, and operational metrics. - Leverage AI where appropriate to prepare reports and dashboards that support compliance monitoring and risk management activities. - Partner with Engineering and Data teams to improve automated compliance monitoring capabilities and optimize the use of AI tools. - Regulatory Compliance & TEFCA Oversight - Support ongoing compliance with TEFCA, the Common Agreement, and QHIN operational requirements. - Monitor changes in healthcare regulations, interoperability requirements, and industry guidance. - Assist with regulatory audits, assessments, and external reviews. - Participate in compliance reviews for new products, services, partnerships, and business initiatives. - Policy Development & Training - Assist in developing and maintaining compliance policies, procedures, and standards. - Support compliance training and awareness programs for employees and business partners. - Help maintain compliance documentation and evidence repositories. - Cross-Functional Collaboration - Work closely with Legal, Security, Privacy, Product, Engineering, and Operations teams. - Provide practical compliance guidance to business stakeholders. - Foster a culture of integrity, accountability, and regulatory excellence. Qualifications - Bachelor’s degree in Healthcare Administration, Health Informatics, Public Health, Business, Information Systems, Law, or related field. - Minimum 5 years of experience in healthcare compliance, healthcare operations, health information exchange, health IT, healthcare privacy, or related regulatory functions. - Working knowledge of HIPAA and other privacy laws, TEFCA and interoperability frameworks, 21st Century Cures Act and Information Blocking requirements, and healthcare privacy and security principles. - Experience performing compliance monitoring, audits, investigations, or risk assessments. - Strong analytical, organizational, process-driven, and documentation skills. - Excellent written, presentation, and verbal communication skills. - Experience reviewing healthcare technical specifications. - Experience leveraging AI-powered tools to enhance compliance workflows. Preferred Qualifications - Experience working for a QHIN, HIE, healthcare technology company, EHR vendor, payer, or healthcare data network. - Experience writing and executing SQL queries. - Experience using Databricks, Snowflake, Azure Data Explorer, or similar data analytics platforms. - Experience supporting compliance programs involving healthcare interoperability and data exchange. - Familiarity with healthcare standards including HL7, FHIR, CDA, and IHE frameworks. - Professional certifications such as Certified in Healthcare Compliance (CHC), Certified in Healthcare Privacy Compliance (CHPC), Certified Information Privacy Professional (CIPP/US), or Certified Information Systems Auditor (CISA). - Experience working with regulatory audits and external assessors. Benefits - Health Gorilla takes a market-based approach to pay, and the base salary range for this role is $95,000 to $120,000, based on experience and geography. - New hire stock option grant. - 401(k) plan with discretionary matching (historically matched at 3%). - Unlimited PTO plus 12 Holidays. - Medical, dental, and vision insurance for you and your family. - Short-, long-term disability, and life insurance. - Optional: Pet Insurance, Legal Services, and Credit Monitoring. - Mental health and wellness support. - Paid parental leave (up to 12 weeks). - Monthly stipend for phone and internet. - Use of an Apple Laptop plus a $400 stipend for additional equipment.