Director, Compliance

Who We Are Claritas Rx uses AI and predictive modeling to help rare disease and specialty brands remove the barriers that keep patients from accessing and staying on the treatments they need. By uniting the most complete view of the patient journey with purpose-built technologies, we predict and resolve access challenges before they disrupt care, combining advanced analytics, real-world data, AI, and CRM capabilities to increase start and refill rates, reduce abandonment, and improve brand performance. Our mission is to ensure patients with chronic, life-threatening diseases receive the support that enables the greatest benefit from their therapy. Simply put, our promise is progress for every patient journey. This is the opportunity to help shape a first-in-industry digital health solution alongside a team of mission-driven professionals. We were named one of Inc.'s Best Workplaces in 2025 and recognized on the 2025 Inc. 5000 list, and our team genuinely respects and supports each other. We thrive on being fast-paced, innovative, and results-driven, and our employees enjoy a flexible, collaborative work environment, unlimited PTO, stock options, and a growing set of tools and technology to drive innovation for our customers. The Position Reporting to the Chief Financial Officer (CFO), the Director of Compliance is the hands-on owner and administrator of the Claritas Rx compliance program. We are seeking a proactive person who surfaces information early, flags risk before it becomes urgent and arrives with clear recommendations. The focus will be on building, enforcing, and reporting on compliance across the business, with privacy as a strong advisory component. Just as important, this person frames security and privacy considerations in business terms so leadership can weigh real tradeoffs and make well-informed decisions. Key Accountabilities Compliance Program Own the Claritas Rx compliance program end to end; policymaking, enforcement, monitoring, reporting, and tracking, across all applicable federal, state, and local regulations governing the Company’s practices. Maintain the compliance policy and procedure library and drive consistent enforcement across employees, agents, and contractors. Manage and further develop the internal risk-assessment program; report compliance and operational risk to leadership with clear, prioritized recommendations. Coordinate, conduct, and report audit and investigative activities; lead compliance-related interactions with outside advisors (legal, regulatory, auditors, consultants). Nurture and foster a culture of compliance and ethics across the Company. Attestations, Assessments & Certifications Fully own the maintenance of the Company’s SOC 2 attestation, customer and partner IT/security assessments, and related certifications; partnering with Engineering/IT, who own technical implementation. Customer & Partner Engagement Serve as a customer- and partner-facing point of contact for compliance and data-sharing questions. Lead impact assessments of data-sharing arrangements and compliance issues that affect customers and partners, translating them into practical guidance and recommendations. Serve as the internal resource to customer- and partner-facing teams, training and enabling them on data-sharing issues and requirements so they can handle routine questions with confidence. Agreements & Data Use Own the policies, review/approval workflow, and contracts database for all Business Associate Agreements (BAAs) and Third-Party / Data Use Agreements (DUAs). Privacy (advisory) Advise the business on the protection of both internal sensitive data and customer/patient PHI/PII across all media. Articulate privacy policies and apply sound business judgment—moving beyond binary, true/false determinations to risk-weighted recommendations leadership can act on. Own HIPAA and applicable state breach determination and notification processes. Other duties or projects as assigned. Who You Are Required Skills: Proactive operator: you surface issues and risks early and come with a clear, actionable recommendation rather than waiting to be asked. Strong business acumen: you frame compliance, privacy, and security tradeoffs in business terms; opportunity cost, revenue impact, and client trust, so leadership can make informed decisions. 7+ years in compliance, privacy, or commercial regulatory roles, with in-house experience at a biopharma or pharma-services company strongly preferred. Expert knowledge of HIPAA, SOC 2, and CCPA/CPRA; working familiarity with GDPR and relevant pharma industry codes/guidelines. Demonstrated ownership of SOC 2 attestations and customer security/IT assessments. Experience owning BAAs and Third-Party/Data Use Agreements—review, approval, and process design. Sound, practical judgment interpreting and applying laws, regulations, industry codes, and company policy. Comfortable and credible in customer- and partner-facing settings; able to advise, counsel, and build consensus across all levels, including executive leadership. High level of integrity and trust, with discretion to handle investigations and sensitive matters confidentially. Strong analytical skills, attention to detail, and project-management ability in a fast-paced, dynamic environment. Excellent writing skills; a confident, polished communicator. Bachelor’s degree required. Role is primarily remote with occasional travel requirements. Preferred Skills: Direct experience in specialty pharmacy, biopharma, or life-sciences data environments (e.g., manufacturer, specialty pharmacy, hub, or data-vendor settings). Experience advising on privacy and security within a product or data-platform context. Familiarity with HITRUST and broader information-security frameworks. Relevant certifications (e.g., CHC, CHPC, CIPP/US). Join Us We are seeking to add new expertise and perspective to our strong team of experienced professionals. We aspire to a culture of accelerated professional development through: shared learning and collaboration; a respectful and fun work environment; and employee empowerment through the effective use of technology and tools. We are a highly collaborative team and prioritize opportunities to connect in person. For employees within a reasonable driving distance of each other, we host regional town hall gatherings approximately every other month. These sessions give our teams a chance to come together, share updates, and strengthen relationships beyond day-to-day work. In addition to our great environment, we offer a competitive salary of $180,000 to $220,000 and benefits package and the opportunity to make a significant impact on a first-in-industry digital health solution. Please send a cover letter along with your resume when applying to the position of interest. Claritas Rx embraces diversity, equality, and transparency. We are committed to building a team that comprises a variety of backgrounds, perspectives, and talents. We believe the more inclusive we are, the better we are. Join us and discover what it feels like to be part of an environment that rewards ingenuity, risk taking and smart work. It's time to fall in love with what you do!