Regulatory Privacy Analyst

At Caris, we understand that cancer is an ugly word—a word no one wants to hear, but one that connects us all. That’s why we’re not just transforming cancer care—we’re changing lives. We introduced precision medicine to the world and built an industry around the idea that every patient deserves answers as unique as their DNA. Backed by cutting-edge molecular science and AI, we ask ourselves every day: “What would I do if this patient were my mom?” That question drives everything we do. But our mission doesn’t stop with cancer. We're pushing the frontiers of medicine and leading a revolution in healthcare—driven by innovation, compassion, and purpose. Join us in our mission to improve the human condition across multiple diseases. If you're passionate about meaningful work and want to be part of something bigger than yourself, Caris is where your impact begins. Position Summary Under the direction of the Privacy Officer, the Regulatory Privacy Analyst provides administrative and operational support to the organization’s privacy compliance program, with a primary focus on managing the privacy inbox, triaging inquiries, assisting with privacy impact assessments, incidents, and ensuring timely, accurate responses to employee questions. This role serves as a key point of contact for day-to-day privacy communications and helps maintain efficient workflows within the privacy function. Job Responsibilities Manage the privacy inbox by reviewing, prioritizing, and responding to employee inquiries related to policies, procedures, and regulatory requirements. Triage incoming questions and route complex or high-risk issues to appropriate compliance, legal, or privacy personnel. Track and log all inquiries, ensuring proper documentation and follow-up through resolution. Support the execution of privacy impact assessments for both internal initiatives and third-party privacy reviews, including gathering requirements, documenting data flows, and identifying potential privacy risks Analyze the impact of new and changing privacy requirements on organizational operations, products, and services. Assist in the management and response to privacy incidents, including intake, triage, documentation, and coordination with cross-functional teams to support timely investigation and resolution. Develop and maintain standard privacy response templates and FAQs to promote consistency and efficiency. Support drafting and distribution of privacy communications, alerts, and guidance. Maintain privacy documentation, including policies, procedures, and inquiry logs. Assist with scheduling, coordination, and documentation of privacy meetings and committee activities. Provide support for the coordination, delivery, and tracking of privacy trainings, including maintaining training records, monitoring completion, and collaborating with stakeholders to ensure ongoing awareness and compliance. Assist with basic monitoring activities, including tracking attestations and policy acknowledgments. Coordinate with cross-functional teams (HR, Legal, Privacy, Operations) to gather information needed to respond to inquiries. Perform additional privacy and data protection related duties as assigned, including supporting cross-functional initiatives, assisting with compliance activities, and contributing to the continuous improvement of privacy program processes and documentation. Required Qualifications Bachelor’s degree in Healthcare, Law, Compliance or related field. 3–5 years of privacy, compliance, regulatory affairs or healthcare operations experience. Experience in healthcare, life sciences, diagnostics, or research environments preferred. Strong organizational and project management skills. Strong knowledge of healthcare privacy laws and regulations, including: HIPAA and HITECH, State privacy laws (e.g., consumer health and data privacy laws) , FTC privacy requirements (preferred), GDPR and other international data protection laws (preferred) Preferred Qualifications Certified in Healthcare Privacy Compliance (CHPC) Certified Information Privacy Manager (CIPM, CIPP/US) Advanced degree (e.g. MHA, MPH, JD) Physical Demands Must possess ability to sit and/or stand for long periods of time. Must possess ability to perform repetitive motion. Ability to lift up to 25 pounds. Majority of work is performed in a desk/cubicle environment. Training All job specific, safety, and compliance training are assigned based on the job functions associated with this employee. Other This position requires periodic travel. ​ Annual Hiring Range $73,000 - $87,000 Actual compensation offer to candidate may vary from posted hiring range based upon geographic location, work experience, education, and/or skill level. The pay ratio between base pay and target incentive (if applicable) will be finalized at offer. Description of Benefits Highly competitive and inclusive medical, dental and vision coverage options Health Savings Account for medical expenses and dependent care expenses Flexible Spending Account to pay for certain out-of-pocket expenses Paid time off, including: vacation, sick time and holidays 401k match and Financial Planning tools LTD and STD insurance coverages, as well as voluntary benefit options Employee Assistance Program Pet Insurance Legal Assistance Tuition Assistance Conditions of Employment: Individual must successfully complete pre-employment process, which includes criminal background check, drug screening, credit check ( applicable for certain positions ) and reference verification. This job description reflects management’s assignment of essential functions. Nothing in this job description restricts management’s right to assign or reassign duties and responsibilities to this job at any time. Caris Life Sciences is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, gender, gender identity, sexual orientation, age, status as a protected veteran, among other things, or status as a qualified individual with disability.