• Own the Claritas Rx compliance program end to end • Maintain the compliance policy and procedure library • Manage and further develop the internal risk-assessment program • Coordinate, conduct, and report audit and investigative activities • Nurture and foster a culture of compliance and ethics

Role Description Reporting to the Chief Financial Officer (CFO), the Director of Compliance is the hands-on owner and administrator of the Claritas Rx compliance program. We are seeking a proactive person who surfaces information early, flags risk before it becomes urgent and arrives with clear recommendations. The focus will be on building, enforcing, and reporting on compliance across the business, with privacy as a strong advisory component. Key Accountabilities - Compliance Program: - Own the Claritas Rx compliance program end to end; policymaking, enforcement, monitoring, reporting, and tracking, across all applicable federal, state, and local regulations governing the Company’s practices. - Maintain the compliance policy and procedure library and drive consistent enforcement across employees, agents, and contractors. - Manage and further develop the internal risk-assessment program; report compliance and operational risk to leadership with clear, prioritized recommendations. - Coordinate, conduct, and report audit and investigative activities; lead compliance-related interactions with outside advisors (legal, regulatory, auditors, consultants). - Nurture and foster a culture of compliance and ethics across the Company. - Attestations, Assessments & Certifications: - Fully own the maintenance of the Company’s SOC 2 attestation, customer and partner IT/security assessments, and related certifications; partnering with Engineering/IT, who own technical implementation. - Customer & Partner Engagement: - Serve as a customer- and partner-facing point of contact for compliance and data-sharing questions. - Lead impact assessments of data-sharing arrangements and compliance issues that affect customers and partners, translating them into practical guidance and recommendations. - Serve as the internal resource to customer- and partner-facing teams, training and enabling them on data-sharing issues and requirements so they can handle routine questions with confidence. - Agreements & Data Use: - Own the policies, review/approval workflow, and contracts database for all Business Associate Agreements (BAAs) and Third-Party / Data Use Agreements (DUAs). - Privacy (advisory): - Advise the business on the protection of both internal sensitive data and customer/patient PHI/PII across all media. - Articulate privacy policies and apply sound business judgment—moving beyond binary, true/false determinations to risk-weighted recommendations leadership can act on. - Own HIPAA and applicable state breach determination and notification processes. - Other duties or projects as assigned. Qualifications - Proactive operator: you surface issues and risks early and come with a clear, actionable recommendation rather than waiting to be asked. - Strong business acumen: you frame compliance, privacy, and security tradeoffs in business terms; opportunity cost, revenue impact, and client trust, so leadership can make informed decisions. - 7+ years in compliance, privacy, or commercial regulatory roles, with in-house experience at a biopharma or pharma-services company strongly preferred. - Expert knowledge of HIPAA, SOC 2, and CCPA/CPRA; working familiarity with GDPR and relevant pharma industry codes/guidelines. - Demonstrated ownership of SOC 2 attestations and customer security/IT assessments. - Experience owning BAAs and Third-Party/Data Use Agreements—review, approval, and process design. - Sound, practical judgment interpreting and applying laws, regulations, industry codes, and company policy. - Comfortable and credible in customer- and partner-facing settings; able to advise, counsel, and build consensus across all levels, including executive leadership. - High level of integrity and trust, with discretion to handle investigations and sensitive matters confidentially. - Strong analytical skills, attention to detail, and project-management ability in a fast-paced, dynamic environment. - Excellent writing skills; a confident, polished communicator. - Bachelor’s degree required. - Role is primarily remote with occasional travel requirements. Preferred Skills - Direct experience in specialty pharmacy, biopharma, or life-sciences data environments (e.g., manufacturer, specialty pharmacy, hub, or data-vendor settings). - Experience advising on privacy and security within a product or data-platform context. - Familiarity with HITRUST and broader information-security frameworks. - Relevant certifications (e.g., CHC, CHPC, CIPP/US). Benefits - Competitive salary of $180,000 to $220,000. - Unlimited PTO. - Stock options. - A growing set of tools and technology to drive innovation for our customers. Company Description Claritas Rx uses AI and predictive modeling to help rare disease and specialty brands remove the barriers that keep patients from accessing and staying on the treatments they need. Our mission is to ensure patients with chronic, life-threatening diseases receive the support that enables the greatest benefit from their therapy.

• Serve as the subject matter expert on state regulations within their region; collaborates with the Market Compliance Managers (MCMs) within their region and key stakeholders to positively impact the business. • Develops, leads, and mentors a team of Market Compliance Managers within the designated region, ensuring alignment with corporate compliance objectives, fostering professional growth, and driving consistent execution of regulatory and market compliance strategies. • Accountable for ensuring that a designated primary contact for regulatory agencies within the region, where permitted, is established and effectively manages relationships, coordinates inspections, and responds to inquiries. • Coordinates the required reporting and responses to regulators and senior leadership of major regulatory issues related to such areas as adverse events/recalls, unexpected changes to operation hours, product events/concerns and/or security. • Develop and implement regional compliance strategies aligned with enterprise goals and regulatory requirements. • Oversee the execution of compliance programs across retail and production operations within the region; identify compliance risks and recommend solutions that balance regulatory obligations with operational agility. • Ensure regulatory frameworks are established and maintained to support licensing commitments, product safety, environmental, and operational standards. • Partners with Government Relations and Regulatory Affairs to monitor, interpret and influence regulatory developments, ensuring company objectives are incorporated into evolving rules and regulations. • Drive the identification, creation and optimization of policies, procedures, and compliance frameworks to support operational excellence. • Lead risk assessments and develop corrective action plans to address compliance gaps, partnering with stakeholders to implement solutions. • Support mergers, acquisitions, and expansion activities by completing regulatory and compliance assessments, and ensuring compliance integration during transitions. • Lead product commercialization efforts, including but not limited to product packaging/labeling reviews and/or timely submissions to regulators; escalate process improvement opportunities to key partners. • Collaborate on training programs to enhance compliance awareness and accountability across the region and all levels of the organization. • Prepare and deliver compliance reports, dashboards, and key performance indicators highlighting trends, risks, and strategic recommendations for the region. • Conduct periodic site visits to validate compliance practices and operational adherence; enforce accountability and recommend continuous improvement initiatives. • Enforce accountability for compliance actions and provide continuous improvement recommendations to leadership. • Perform other job-related duties as assigned.

• Support GDPR and data privacy projects across EMEA. • Assist with data mapping, Records of Processing Activities (ROPA), and DPIAs. • Advise on lawful processing of personal and health data. • Support GDPR training, data subject rights processes, international data transfers, and privacy-by-design initiatives. • Collaborate with Legal, IT, HR, Marketing, Sales, Clinical, and Product teams. • Support ZOLL's healthcare compliance program in line with AdvaMed and MedTech Europe Codes. • Advise on compliant interactions with healthcare professionals and organizations. • Assist with compliance training, risk assessments, and mitigation activities.