Regulatory Compliance Analyst

Cedar is seeking a Regulatory Compliance Analyst to play a crucial role in ensuring the company's  compliance with the laws and regulations governing our products and operations. This position requires a deep passion for understanding the complex and evolving regulatory landscape impacting the consumer healthcare financial experience across the US and the ability to translate these complex regulations into plain language that business teams can understand.

The Regulatory Analyst will report directly to the Chief Compliance Officer.

Essential Duties and Responsibilities:

• Regulatory Research & Monitoring:
  • HIPAA: Including the Security Rule, Privacy Rule, and Breach Notification Rule.
  • HITECH Act: Focusing on data security and breach notification requirements.
  • State privacy laws: Including those related to data security, consumer protection, and financial transactions.
  • Federal Trade Commission (FTC) regulations: Regarding data security and consumer protection.
  • State and federal laws related to billing, collections & payment processing: Including those governing data security, fraud prevention, and consumer protection.
  • Fintech regulations: Including those related to money transmission, data security, and consumer protection.
• Conduct in-depth research and analysis of relevant healthcare laws and regulations applicable to:
• Monitor regulatory changes and assess their impact on the organization's products, services, and operations.
• Maintain and update internal compliance policies and procedures to reflect changes in the regulatory landscape.
• Risk Assessment & Mitigation:
• Identify and assess potential compliance risks related to patient data privacy, security, and product safety.
• Develop and implement risk mitigation strategies to address identified compliance issues, including security controls, data encryption, and access controls.
• Issue Resolution & Reporting:
• Investigate and resolve compliance issues and concerns related to regulatory compliance.
• Prepare and submit compliance reports to management and regulatory authorities (as required).
• Assist in responding to regulatory inquiries and investigations.
• Project Management:
• Assist in the implementation of new compliance initiatives and projects.
• Manage compliance projects effectively, ensuring timely completion and adherence to project timelines.

Core Qualifications:

• Bachelor's degree (or other relevant 4 year professional degree)
• 4 years of experience in regulatory compliance, law l, or a related field (with at least 2 years focused on healthcare regulatory compliance), with a strong preference for experience in the healthcare, payments, or fintech industry.
• Excellent analytical, research, and problem-solving skills.
• Strong written and verbal communication skills with the ability to explain complex legal and regulatory concepts clearly and concisely.
• Detail-oriented with strong organizational and time-management skills.
• Ability to work independently and as part of a team.

Preferred Qualifications:

• Certified in Healthcare Compliance (CHC) or a related certification.
• Experience working within a fast-paced and dynamic startup environment, particularly in a fully remote or partially remote role.
• Experience with compliance management software.
• Knowledge of payment card industry data security standards (PCI DSS).

Juris Doctor (J.D.) degree or Master of Laws (LL.M.). Note: this is not an in-house counsel position, but will work closely with our legal team. 

Compensation Range and Benefits

• Salary/Hourly Rate Range*:  $114,800-$150,000
• This role is equity eligible 
• This role offers a competitive benefits and wellness package

*Subject to location, experience, and education

#LI-REMOTE