Position Summary:

The Principal, Compliance is a Compliance generalist overseeing coordination and delivery of major company initiatives, which often involve complex dependencies tracked across multiple teams. They may independently manage internal and external stakeholders, scope, timeline, and risks. They also may perform and assist with other routine Compliance activities as assigned and under general supervision by the AVP, Compliance.

They are an expert in multiple focus areas of compliance and are capable in setting direction and proactively influencing senior leaders.

Essential Duties and Responsibilities:

• Hands on preparation of and management of routine and ad-hoc broad spectrum of routine compliance reviews including vendor reviews, processing activity reviews and others
• Lead and/or manage internal and external audits independently in alignment with key compliance, privacy and security standards potentially including SOC2, HITRUST, FedRAMP, PCI, HIPAA, GDPR, CPRA, PIPEDA and customer contractual requirements
• Build and maintain positive working relationships with stakeholders, colleagues and customers
• Detail and action oriented team-player with flexibility and bias towards continuous improvement
• Security-related Responsibilities:
• Compliance with Information Security Policies
• Responsibility and accountability for executing League's policies and procedures
• Notification of HR, Legal, Compliance & Security of any incidents, breaches or policy violations

Required Skills:

• Bachelor’s degree
• A minimum of 5+ years of experience in a compliance, audit and/or privacy capacity in a healthcare/tech company
• Familiarity with OneTrust tool