Compliance

• Manage the complete third-party risk management (TPRM) program, from initial assessment to ongoing monitoring.
• Conduct security risk assessments for all vendors, especially those handling protected health information (PHI).
• Collaborate with Legal to review security language in vendor contracts and Business Associate Agreements (BAAs).
• Maintain the vendor risk register, track remediation of risks, and report on vendor risk exposure.
• Demonstrate success developing third-party risk governance programs with Legal, Security, and Procurement to increase efficiency and reduce friction across stakeholders.
• Manage all internal and external audits, including planning, evidence collection, and coordinating with auditors.
• Serve as the main point of contact for external auditors (e.g., for SOC 2, HIPAA).
• Oversee security controls (technical and procedural) to ensure continuous compliance with HIPAA, HITECH, and SOC 2 frameworks.
• Translate complex regulatory requirements into actionable security controls and procedures for technical and business teams.
• Track and manage the remediation of all audit findings.

Senior Manager, Governance Risk and Compliance

Director, Field Medical Affairs – COVID-19/Virology

US Director, Regulatory Policy and Intelligence

Compliance Specialist I

Senior NERC & Operations Compliance Manager – Battery Storage