Compliance Manager

The Role

U.S. healthcare is frustrating and deeply flawed. Cedar’s mission is to drive better outcomes for everyone involved, including providers, insurance companies and the people they serve. At a time when consumer-friendly healthcare experiences are more critical than ever, our platform is uniquely equipped to solve problems that lead to billing issues and administrative waste. At Cedar, know that your work will have a meaningful impact on people’s lives.

Cedar is seeking an experienced Compliance Manager to be responsible for running and continuously improving key elements of Cedar’s compliance program. Reporting directly to the Director of Compliance, this position will be a key individual contributor in the maturation and management of the compliance function at Cedar. 

Responsibilities

• Applying and interpreting audit and compliance requirements on behalf of the organization
• Coordinating the preparation and ongoing review of policies, procedures, training materials and other communication tools to ensure the organization meets compliance requirements
• Support the continued build out and operation of the Company’s third party risk management program (TPRM), including policies and processes for conducting vendor due diligence and risk assessments, design and testing of controls, monitoring third-party activities, and providing ongoing training and reporting to stakeholders.
• Act as a liaison for Cedar's Compliance Program with both internal and external stakeholders.
• Coordinating assigned elements of external audits (including HITRUST, SOC2 Type II, PCI, and more) and interacting with external auditors 
• Creating and reviewing compliance documentation
• Reviewing and assessing specific potential compliance issues and interacting with internal and external stakeholders to resolve them
• Contributing to risk-based compliance testing of controls to identify, correct, and detect noncompliance
• Coordinating rollout and training of new or updated policies and directives when required
• Support cross-functional teams to integrate compliance considerations into product development, operations, and business strategies.
• Support compliance training and awareness initiatives for employees to promote understanding of regulatory requirements and ethical standards.

What we look for in an ideal candidate:

• At least four years of compliance experience 
• An enthusiasm for building a great compliance function in a company that’s still growing and scaling
• Experience implementing, using and optimising GRC tooling; experience with Vanta a plus
• A solid background in statistical, analytical, strategic and effective communication, writing, project management, and organizational skills. 
• Proficiency in completing information security and compliance questionnaires.
• Working knowledge of the following frameworks(preferrably with some audit experience): HIPAA, HITRUST, SOC2, PCI and NIST; plus familiarity with laws, regulations, standards and guidelines applicable to healthcare businesses, including privacy and data security, medical billing and anti-kickback statutes. You may not know all of these deeply but should have solid familiarity and a willingness and excitement to learn what you don’t already know.  
• The ability to collaborate and build partnerships with colleagues throughout the organization. We’re a small and mighty team where Compliance and Legal functions operate in a combined department and we’re often closely paired with teams such as Security, IT, Product, Finance and Servicing.

Compensation Range and Benefits

• Salary Range*: $148,750 - $175,000
• This role is equity eligible 
• This role offers a competitive benefits and wellness package

*Subject to location, experience, and education

#LI-REMOTE