Compliance

• Use expert knowledge of HIPAA and other Information Privacy and Security related federal and state laws and regulations and OHSU policies and procedures to effectively: Timely respond to requests for Information Privacy and Security inquiries with accurate and coherent guidance while maintaining compliance with all applicable policy, regulatory and legal requirements.
• Serve as an expert advisory on Information Privacy and Security policy requirements specific to human subject research activities.
• Conduct privacy reviews as directed by leadership or in line with the Privacy program, including conducting risk evaluations and facility reviews.
• Work with leadership and stakeholders to develop plans to address identified risks.
• Provide accurate and effective education and training as assigned and in line with the Privacy training program.
• Evaluate business practices in relation to current privacy policies and laws, and provide recommendations on risk reduction.
• Appropriately identify activities or practices that are high-risk and/or high-impact to the business that require escalation to leadership for review and guidance.
• Work with organizational partners to improve their compliance with regulations and IPS policies/procedures and support related projects as applicable.
• As directed by leadership, represent the Privacy Office on assignments for both internal and external constituencies on matters related to information privacy and security.
• Provide regulatory and policy guidance to ensure the appropriate and effective use of Epic and related systems to improve HIPAA compliance and controls related to ePHI.
• Serve as a subject matter expert/consultant on information privacy issues to all areas and all levels of the OHSU community.
• Manage assigned projects/tasks to ensure completion in a timely, complete and high-quality fashion.
• Participate in continuous quality improvement, including compliance with regulations and standards regarding Epic and other ePHI systems.
• Work with leadership and the OHSU community, and other appropriate OHSU units in development and enhancement of information privacy and security compliance at OHSU. Identify weaknesses and deficiencies and provide input to leadership on how to enhance the quality and efficiency of the work performed.

Privacy Associate – Privacy Compliance Specialist, Sr

• Support the organization’s GRC framework, policies, standards, and procedures
• Conduct risk assessments and maintain enterprise risk registers
• Identify, assess, and track remediation of technology and cybersecurity risks
• Assist in third-party/vendor risk assessments and compliance reviews
• Monitor compliance with internal policies and regulatory requirements
• Support ITGC (IT General Controls) and SOX compliance activities
• Coordinate control testing, evidence collection, and remediation tracking
• Work with control owners to ensure Design effectiveness and operational effectiveness of SOX controls
• Assist during external and internal SOX audits
• Maintain documentation for SOX controls, narratives, and process flows
• Coordinate vulnerability management activities with infrastructure teams
• Track remediation of identified vulnerabilities and security findings
• Support periodic access reviews and security compliance assessments
• Act as liaison between IT/Security teams and Internal/External Auditors
• Prepare audit evidence and coordinate audit requests
• Track audit findings and remediation plans through closure
• Assist with audit readiness initiatives and continuous monitoring activities
• Develop dashboards, metrics, and compliance reports for management
• Maintain accurate documentation for risks, controls, findings, and remediation efforts
• Support policy and procedure reviews and updates
• Support automation for SOX controls by identifying the scope and recommend all possible options for automation
• Directs activities to define, deploy, evaluate and support common computing standards, IT processes, tools and process/performance metrics
• Leads activities to define plans to support common standards and processes
• Identifies qualitative and quantitative improvement measures
• Advises on the selection of key parameters and standards to monitor progress
• Leads the definition, development and deployment of common process requirements and infrastructure products and services
• Directs activities to educate and promote use of Boeing IT common processes, methodologies, products and services
• Leads, consults and coaches in common processes for software development and maintenance
• Leads the review and evaluation of new technology for software process impact
• Supports and integrates architecture mapping to common processes

Senior Governance, Risk, and Compliance Process Analyst

• Lead, coach, and develop a team of Product Stewardship SMEs, regulatory experts, toxicologists, labeling specialists, and related technical contributors.
• Create an accountable and customer-focused team culture that delivers consistent business and compliance outcomes.
• Support product design and development by partnering with R&D and Business Units to “design in” compliance, sustainability, safety, and customer value during New Product Innovation.
• Guide technical work related to product stewardship, product labeling, chemical assessments, customer use cases, usage parameters, testing, and compliance validation.
• Ensure current products continue to meet regulatory and market access requirements as products, ingredients, formulations, supply chains, and global regulations change.
• Partner with cross-functional stakeholders to resolve product stewardship issues, support business decisions, and enable practical, timely solutions.
• Translate regulatory, customer, and market requirements into clear actions for technical teams and business partners.
• Contribute to external responses for customers, regulators, government stakeholders, and other key audiences with clarity, accuracy, and credibility.
• Drive continuous improvement in stewardship processes, data quality, tools, automation, and operating practices to improve efficiency, consistency, and execution quality.
• Help identify emerging regulatory or market pressures and support proactive planning to reduce risk and maintain customer trust.

Product Stewardship and Chemical Compliance Manager

• Leads preparedness for regulatory inspections ensuring compliance with global standards
• Conducts mock audits and coaches site leadership for successful audit outcomes
• Develops audit and inspection readiness plans
• Collaborates with AbbVie teams for compliance and quality deliverables
• Provides guidance on quality concerns ensuring new product launches meet requirements

Associate Director, Global Quality and Compliance Excellence

• Monitor for relevant regulatory developments across all 50 states and the SEC, ensuring timely awareness of new compliance issues, rule proposals, and comment periods.
• Develop and maintain XYPN’s advocacy and policy roadmap, including issue tracking, prioritization, engagement status, and next steps.
• Partner with the Managing Director and Executive Team to shape advocacy priorities and provide informed recommendations on engagement opportunities.
• Develop a deep understanding of XYPN member firms, industry trends, and emerging regulatory issues to inform advocacy priorities and identify opportunities to influence regulation.
• Develop consistent channels for gathering member feedback, case studies, and practical examples to inform XYPN’s advocacy positions.
• Coordinate member-facing communications regarding advocacy initiatives, regulatory updates, and policy resources.
• Partner with members to prepare for legislative or regulatory hearings, meetings with state regulators and legislators, and other advocacy opportunities, including testimony and supporting materials.
• Develop and deliver educational sessions for legislators, regulators, XYPN members, and industry groups on regulatory trends, RIA business models, operational realities, and the impact of proposed regulation.
• Build productive relationships with regulators, industry stakeholders, advocacy partners, and member firms to support ongoing dialogue and collaboration.
• Coordinate strategic partnerships with industry associations, including IAA, FPA, NAPFA, CFP Board, and other aligned organizations.
• Draft policy positions and supporting materials, including comment letters, white papers, policy briefs, issue summaries, case studies, and testimony.
• Lead execution of advocacy activity in individual states, with the SEC, and with NASAA, including preparing formal responses to proposed regulations, policies, and rulemaking initiatives.
• Represent XYPN in meetings with state and SEC regulatory staff, NASAA representatives, and other relevant stakeholders on advocacy and rulemaking matters.
• Attend industry conferences, regulatory events, hearings, symposia, and working groups to strengthen relationships and stay engaged in evolving policy conversations.
• Accountable for reporting on activity and impact related metrics ranging from: Policy issues being tracked, Comment letters submitted, Meetings with regulators, Evidenced impact on policy changes.

Director of Policy and Regulatory Affairs

• Prepare, review, monitor or maintain contracts and ensure compliance
• Audits municipal contracts to verify compliance
• Works with District Managers to resolve noncompliance issues
• Partners with Legal staff to manage contracts and agreements
• Manages complex contracts and recommends extensions or bidding
• Investigates contract inquiries and prepares documents for resolutions
• Participates in strategic planning for municipal business
• Evaluates existing municipal contracts for new business opportunities

Contract Compliance Representative III

• Advise clients on federal, state, and local regulatory frameworks governing electric, natural gas, and other energy infrastructure, and on regulatory strategy, compliance, and policy development related to energy and environmental mandates
• Prepare and oversee regulatory filings, including rate cases, certificates of need, cost recovery proceedings, and rulemakings
• Lead and manage administrative proceedings before state regulatory agencies, and related negotiations
• Draft and negotiate agreements related to project development, power supply, operations, and regulatory approvals
• Collaborate with transactional, environmental, real estate and litigation teams on complex, multidisciplinary matters
• Mentor junior attorneys and contribute to client development, thought leadership, and industry engagement

Senior Energy Regulatory Associate

• Talking to new carriers and assisting with the set up process.
• Working closely with other administrative, support team and operational offices, including Agents.
• Assisting with investigating risk concerns for the company and vetting carriers in the database to protect the company.
• Providing top-notch service as a crucial gatekeeper for carrier vetting and legitimacy for hauling freight.

Carrier Compliance Specialist

• Reviews, interprets and summarizes proposed and enacted legislation and regulatory updates
• Monitoring proposed changes to Oregon Administrative Rules (OAR)
• Support the end-to-end process for the annual contract restatement
• Attend key meetings for Oregon Health Plan (OHP) contractor workgroups
• Support monthly Division of Financial Regulation (DFR) meetings

Regulatory Operations Analyst III – Medicaid

• Act as main contact for dealer complaints, managing intake, documentation, investigation, and resolution
• Recommend and implement fair resolutions with leadership, ensuring compliance
• Enhance and maintain complaint tracking and reporting processes
• Standardize remediation procedures for consistent and efficient complaint handling
• Build strong dealership relationships through regular visits and promote OCCU Indirect Lending products
• Pursue new dealer partnerships and support existing ones
• Educate dealers on OCCU policies, procedures, and product updates
• Liaise between dealerships, underwriting, and internal teams for smooth transactions
• Monitor dealer activity for compliance issues, including misrepresentation
• Participate in marketing, partnership, and program development events

Dealer Compliance Administrator

• Manages and oversees the audit coordination process
• Leads and assigns tasks to Compliance Support Specialists
• Trains new employees in audit procedures and systems
• Conducts, coordinates, organizes, and schedules internal and external audits
• Collaborates with internal teams to ensure timely and accurate data collection
• Manages and maintains audit documentation, including tracking findings
• Serves as the primary liaison between auditors and internal stakeholders
• Analyzes audit results to identify trends, risks, and areas for improvement
• Develops, tracks, and supports corrective action plans based on audit findings
• Communicates audit results and recommendations to management
• Prepares audit reports and statistical trend analyses
• Participates in special reviews and initiatives to enhance customer experience
• Stays current on regulatory changes through ongoing training and professional development

Compliance Audit Supervisor

• Review export documentation for accuracy (commercial invoices, packing lists, Automated Export Systems (AES) filings, shipping instructions).
• Conduct export reviews to confirm appropriate authorization prior to shipment or technology transfer.
• Support red-flag reviews and due diligence for end-use/end-user concerns; elevate potential issues to Compliance leadership.
• Assist with compliance requirements for global visitors, demonstrations, and technical exchanges involving foreign persons.
• Help administer internal controls for technical data and controlled technology access (e.g., file permissions, marking, transfer methods, visitor controls).
• Help maintain written procedures, work instructions, and job aids for export processes and provide training to the business.
• Identify process gaps or recurring errors; propose practical improvements and assist with implementation.
• Support internal communications, compliance reminders, and periodic awareness campaigns.
• Support internal audits and other monitoring activities by collecting evidence, reconciling transactions, and helping draft corrective action documentation.
• Assist with metrics and reporting (e.g., classification status, license utilization, screening volumes, shipment holds).
• Assist business in cross-border collaboration efforts to ensure compliance.
• Review parts for classification accuracy.
• Conduct in-person site visits to access local Trade Compliance Program.
• Provide guidance/direction on ITAR and EAR regulations.
• Assist the business with investigations and disclosures of any trade compliance related incidents.

Senior Trade Compliance Specialist

• Monitor all project activities to ensure compliance with ARC funding requirements, federal guidelines, and contractual obligations
• Maintain organized, audit-ready documentation including deliverables, financial records, and supporting materials
• Support preparation and submission of required progress reports, compliance documentation, and final project reports
• Prepare project records for audit reviews and support responses to compliance inquiries from funders or auditors
• Ensure project processes align with federal, state, and institutional compliance requirements; recommend improvements where needed
• Work with project team members to ensure compliance requirements are understood, implemented, and documented across all workstreams
• Identify compliance risks and support development of mitigation strategies to reduce exposure and ensure project integrity

Grant Compliance Specialist

• Lead client relationship development, sales, and delivery of the full spectrum of ERM’s consulting services, with particular emphasis on growing Sustainable Operations offerings.
• Develop and implement EHS compliance and risk management systems that help clients strengthen governance, improve performance, and manage regulatory obligations.
• Advise clients on data management, reporting, and disclosure support related to EHS performance.
• Develop commercial strategies to pursue and win new business opportunities that drive revenue growth with target clients aligned to ERM’s global strategy.
• Listen carefully to client needs and co-develop practical, innovative solutions that deliver long-term value.
• Build, grow, and lead a high-performing team, mentoring consultants and helping emerging leaders expand their responsibilities and impact.
• Drive service innovation and collaboration across ERM service lines and participate actively in local and regional commercial initiatives.
• Expand the visibility of ERM’s Sustainable Operations services through thought leadership, industry engagement, and strategic partnerships.
• Drive profitable growth by expanding key client relationships and winning new work across the Sustainable Operations portfolio.
• Provide strategic and technical leadership in environmental compliance, operational risk, and EHS performance improvement.
• Build and lead a high-performing consulting team, creating an environment of accountability, collaboration, and innovation.
• Foster a culture that reflects ERM’s commitment to safety, sustainability, inclusion, and high-quality client service.

Consulting Partner, Environmental Compliance

• Expand upon manual control execution responsibilities
• Serve as a critical team resource for escalation support, operational oversight, and management and training needs
• Partner with stakeholders to further automate and/or offshore manual processes
• Support transitions and help design or enhance team coverage models for ancillary tasks
• Enable staffing managers to focus effectively on people leadership and workforce strategy

Identity Theft Regulatory Review Representative

• Provide leadership for OCCU's compliance team
• Advance OCCU's Compliance Management System (CMS) to ensure regulatory adherence
• Partner across the organization to manage compliance risk
• Lead regulatory change management and oversee key compliance programs
• Serve as a primary liaison for regulatory examinations and audits

Regulatory Compliance Manager

• Support the design, implementation, and ongoing maturity of an enterprise-wide privacy program aligned with regulatory requirements and business objectives.
• Drive consistency in the application of privacy requirements across business units and functional areas
• Provide practical, risk-based guidance to business units on privacy practices, compliance requirements, and emerging privacy and AI risk.
• Translate complex regulatory requirements into actionable business practices and operational controls.
• Provide operational guidance on global and US privacy regulations, including HIPAA, CPRA/CCPA
• Build strong relationships with stakeholders to promote proactive engagement on privacy matters.
• Partner with cross-functional teams to embed privacy into new and existing initiatives.
• Support development of privacy impact assessments (PIAs) and risk assessments to identify and mitigate potential privacy risks

Privacy Compliance Consultant

• The Senior GRC Analyst acts as a strategic lead to advance security and risk operations
• Integrate people, policy, and technology to drive operational excellence and framework maturity
• Identify security gaps, implement best practices, and mature the control environment to ensure we stay ahead of evolving regulatory and threat landscapes
• Build an AI-first compliance function
• Lead from the front in identifying and deploying AI tools that scale the GRC program

Senior GRC Analyst

• Manage the development and implementation of regulatory strategies and plans to support the timely introduction of new products and the preparation/review of international regulatory submission(s) (EU MDR Tech File, Health Canada submission, Saudi FDA, etc)
• Represent international regulatory interests on cross-functional project team for new and existing products
• Review and approve labeling requirements for global market(s); translation material, claims review, IFU, etc.
• Evaluate change proposals for international regulatory impact
• Maintain effective communication within the RA/QA group, as well as, cross-functional business partners, i.e. Product Development, Marketing, Legal, etc.
• Support Regulatory and Quality Departments efforts in maintaining ISO 13485 and MDSAP Certifications (internal audit, NB audits, SOP compliance, etc)
• May provide direct supervision of individual(s)

Global Regulatory Manager – Contract

• Partners with their assigned Line of Business, other Risk/Compliance/Audit (RCA) professionals, and RCA Managers to, depending on their function, create, implement, maintain, review or oversee an effective compliance risk management framework
• Participates in projects and/or activities that ensure compliance with applicable federal, state, and local laws and regulations
• Identifies gaps and inform solutions that minimize losses resulting from inadequate internal processes, systems or human errors
• Identifies, responds and/or escalates risks as appropriate
• Serves as a functional liaison between the Line of Business and the Lines of Defense

See all jobs on JobTailor