Director, Compliance

Who We Are

Claritas Rx uses AI and predictive modeling to help rare disease and specialty brands remove the barriers that keep patients from accessing and staying on the treatments they need. By uniting the most complete view of the patient journey with purpose-built technologies, we predict and resolve access challenges before they disrupt care, combining advanced analytics, real-world data, AI, and CRM capabilities to increase start and refill rates, reduce abandonment, and improve brand performance. Our mission is to ensure patients with chronic, life-threatening diseases receive the support that enables the greatest benefit from their therapy. Simply put, our promise is progress for every patient journey.

This is the opportunity to help shape a first-in-industry digital health solution alongside a team of mission-driven professionals. We were named one of Inc.'s Best Workplaces in 2025 and recognized on the 2025 Inc. 5000 list, and our team genuinely respects and supports each other. We thrive on being fast-paced, innovative, and results-driven, and our employees enjoy a flexible, collaborative work environment, unlimited PTO, stock options, and a growing set of tools and technology to drive innovation for our customers.

The Position

Reporting to the Chief Financial Officer (CFO), the Director of Compliance is the hands-on owner and administrator of the Claritas Rx compliance program. We are seeking a proactive person who surfaces information early, flags risk before it becomes urgent and arrives with clear recommendations. The focus will be on building, enforcing, and reporting on compliance across the business, with privacy as a strong advisory component. Just as important, this person frames security and privacy considerations in business terms so leadership can weigh real tradeoffs and make well-informed decisions.

Key Accountabilities

Compliance Program

• Own the Claritas Rx compliance program end to end; policymaking, enforcement, monitoring, reporting, and tracking, across all applicable federal, state, and local regulations governing the Company’s practices.
• Maintain the compliance policy and procedure library and drive consistent enforcement across employees, agents, and contractors.
• Manage and further develop the internal risk-assessment program; report compliance and operational risk to leadership with clear, prioritized recommendations.
• Coordinate, conduct, and report audit and investigative activities; lead compliance-related interactions with outside advisors (legal, regulatory, auditors, consultants).
• Nurture and foster a culture of compliance and ethics across the Company.

Attestations, Assessments & Certifications

• Fully own the maintenance of the Company’s SOC 2 attestation, customer and partner IT/security assessments, and related certifications; partnering with Engineering/IT, who own technical implementation.

Customer & Partner Engagement

• Serve as a customer- and partner-facing point of contact for compliance and data-sharing questions.
• Lead impact assessments of data-sharing arrangements and compliance issues that affect customers and partners, translating them into practical guidance and recommendations.
• Serve as the internal resource to customer- and partner-facing teams, training and enabling them on data-sharing issues and requirements so they can handle routine questions with confidence.

Agreements & Data Use

• Own the policies, review/approval workflow, and contracts database for all Business Associate Agreements (BAAs) and Third-Party / Data Use Agreements (DUAs).

Privacy (advisory)

• Advise the business on the protection of both internal sensitive data and customer/patient PHI/PII across all media.
• Articulate privacy policies and apply sound business judgment—moving beyond binary, true/false determinations to risk-weighted recommendations leadership can act on.
• Own HIPAA and applicable state breach determination and notification processes.
• Other duties or projects as assigned.

Who You Are

Required Skills:

• Proactive operator: you surface issues and risks early and come with a clear, actionable recommendation rather than waiting to be asked.
• Strong business acumen: you frame compliance, privacy, and security tradeoffs in business terms; opportunity cost, revenue impact, and client trust, so leadership can make informed decisions.
• 7+ years in compliance, privacy, or commercial regulatory roles, with in-house experience at a biopharma or pharma-services company strongly preferred.
• Expert knowledge of HIPAA, SOC 2, and CCPA/CPRA; working familiari