At Caris, we understand that cancer is an ugly word—a word no one wants to hear, but one that connects us all. That’s why we’re not just transforming cancer care—we’re changing lives.

We introduced precision medicine to the world and built an industry around the idea that every patient deserves answers as unique as their DNA. Backed by cutting-edge molecular science and AI, we ask ourselves every day: “What would I do if this patient were my mom?” That question drives everything we do.

But our mission doesn’t stop with cancer. We're pushing the frontiers of medicine and leading a revolution in healthcare—driven by innovation, compassion, and purpose.

Join us in our mission to improve the human condition across multiple diseases. If you're passionate about meaningful work and want to be part of something bigger than yourself, Caris is where your impact begins.

Position Summary
The Senior Privacy & Compliance Specialist will contribute to projects that support overall privacy and compliance initiatives as designated by the Director – Privacy & Compliance and at the direction of the Chief Compliance Officer, and Privacy Officer. The Senior Privacy & Compliance Specialist will support the company’s privacy and compliance programs, which include but is not limited to the daily operation, development, implementation, and maintenance of procedures, policies, compliance, and assistance with release of information requests, training, and investigations. Furthermore, their function assists with monitoring programs and tracking incidents and privacy breaches while ensuring company policy aligns with federal and state laws.

Job Responsibilities
Support a comprehensive and strategic privacy and compliance program that maintains, develops, and implements processes and policies that enable consistent and effective privacy and compliance practices.
Ensure confidentiality of protected health information of any format; provide standards, policies, privacy forms, and up-to-date procedures.
Support partnership with information security to ensure there is alignment between privacy and security compliance programs such as investigations, practices, policies, and acts as a liaison to an organization’s information department.
Assists with privacy-related incidents and breach investigations.
Remains up to date on relevant privacy and data protection laws and regulations, as well as on technological developments, threats, and evolving industry standards to ensure an ongoing ability to provide relevant privacy and compliance information and advice.
Provide support in connection with policy development, and business relations related to privacy and compliance.
Assists with periodic and initial information privacy risk analysis, mitigation, and remediation.
Conducts relevant privacy and compliance auditing and monitoring activities in line with other compliance and operational functions.
Assist in the development and delivery of both initial and ongoing privacy training to employees.
Responds to patient medical records requests. Maintains accurate and complete documentation in patient records to continuously improve the customer service process and meets regulations requirements.
Respond to medical records request relating to litigation.
Manage privacy and compliance inboxes.
Maintains databases and trackers that support corporate privacy and compliance reporting needs.
Works independently on “ad-hoc” and routine assignments.
Coordinates training on a variety of privacy and compliance topics.
Partners with business leaders to develop, implement, and monitor key privacy and compliance functions and risk areas in accordance with OIG guidance for clinical laboratory compliance programs.
Supports identification of key privacy and compliance risk areas.
Assists as needed to perform other related duties and special projects as required.
Manages time effectively and meets expected deadlines.

Required Qualifications

• Bachelor’s degree or equivalent relevant work experience required.
• 5+ years’ experience in privacy, compliance, or regulatory related role.
• Knowledge and experience in HIPAA, state and federal information privacy laws and the importance of privacy of patient data.
• Knowledge and experience relating to data use, security, and privacy.
• Demonstrated organization, facilitation, written and oral communication, and presentation skills.
• Computer skills and proficiency in MS Word, Excel, and PowerPoint required.
• Ability to interact with all levels of organization.
• Ability to deal with confidential information and/or issues using discretion and judgment.
• Critical thinking with excellent research and analytical skills.
• Ability to identify, assess, and report on compliance gaps and/or internal controls and provide appropriate recommendations, monitoring and testing for compliance.
• Clear, concise writing and presentation skills.

Preferred Qualifications

• Recommended privacy, security, and/or compliance certification.
• Prior clinical laboratory or other medical experience.
• Data analysis experience preferred but not required.

Training

• All job specific, safety, and compliance training are assigned based on the job functions associated with this employee.

Other

• Position may require overtime and after-hours response to emergency issues.

Conditions of Employment: Individual must successfully complete pre-employment process, which includes criminal background check, drug screening, credit check ( applicable for certain positions) and reference verification.

This job description reflects management’s assignment of essential functions. Nothing in this job description restricts management’s right to assign or reassign duties and responsibilities to this job at any time.

Caris Life Sciences is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, gender, gender identity, sexual orientation, age, status as a protected veteran, among other things, or status as a qualified individual with disability.