Legal: Legal/Compliance Officer

Job Summary:

We are seeking an experienced Legal/Compliance Officer to oversee our organization's legal and compliance functions related to information security, data privacy, and contract compliance. The primary responsibility of this position is to ensure Ambit’s compliance with applicable laws and regulations including HIPAA and GDPR, minimize legal and financial risks, and protect the organization's assets and reputation.

Key Responsibilities:

• Contract Execution: The Legal/Compliance Officer will be responsible for reviewing, drafting, and negotiating various contracts, including software license agreements, service level agreements, vendor contracts, and business associate subcontractor agreements. The officer will ensure that these contracts comply with legal and regulatory requirements and meet Ambit's needs.
• Contract Oversight: The officer will serve as the main point of contact for inquiries (including standardized procurement questionnaires) about our compliance practices and will be responsible for overseeing our compliance with the terms of executed contracts.
• Organizational Policy Oversight: The officer will ensure necessary organizational policies and procedures are in place and reviewed on a regular basis and will ensure staff have been trained.
• Risk Assessments. Decide when we need to do internal/external risk assessments/audits, including budgeting for them (and coordinate if anyone asks to audit us)
• Regulatory Monitoring & Compliance
• Coordinating with IT on Information Security.
• Management Reporting
• Data Privacy: Write and maintain privacy policies and terms & conditions for all Ambit websites, systems, etc. to comply with applicable laws. Assess and approve data flows to ensure informational system compliance.
• Research Compliance: Support compliant market research, IRBs.
• HIPAA Compliance: The officer will be responsible for overseeing Ambit’s compliance with HIPAA regulations, including responding to HIPAA-related inquiries. The officer will serve as HIPAA Compliance Officer, encompassing Privacy and Information Security Officer (ISO) roles.

Qualifications:

• Bachelor's degree in law, business, or related field.
• 5+ years of experience in legal and compliance functions related to information security and contract compliance.
• Experience in drafting and negotiating software license agreements, service level agreements, and vendor contracts.
• Familiarity with HIPAA regulations, including the Privacy Rule and Security Rule.
• Experience in developing and implementing policies and procedures related to information security.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills.
• Ability to work independently and as part of a team.
• Strong organizational and time-management skills.
• Ability to maintain confidentiality and handle sensitive information.
• The Legal/Compliance Officer will report to the Chief Executive Officer and work closely with other departments, including IT, Operations, and Finance.

Base salary range: $130,000 - 170,000