Associate Attorney, Compliance

About the role

Associate Attorney, Compliance will be a key partner to the Compliance team. With limited supervision, this role will provide practical, day-to-day legal support for Marathon's compliance and privacy program in a fast-paced, highly regulated healthcare environment. The role focuses on translating regulatory and legal requirements into clear, workable guidance and ensuring consistent execution across the organization. This position will support compliance governance, privacy program activities, policy lifecycle management, regulatory tracking, vendor and data-sharing relationships, audits, investigations, and readiness efforts including HITRUST. ESSENTIAL DUTIES & RESPONSIBILITIES Provide practical legal guidance on healthcare compliance and privacy matters, including HIPAA-related questions, internal policies, and operational workflows. Support compliance and privacy investigations and incident response activities, including documentation, analysis support, tracking, escalation, and remediation follow-through. Review and support routine compliance- and privacy-related agreements, including, business associate agreements, and data-sharing agreements, with appropriate attorney oversight. Partner with Compliance and Legal leadership to support vendor, third-party, and data-handling compliance processes and documentation. Support Compliance, Privacy, and GRC governance activities, including preparing agendas, drafting meeting minutes, tracking action items, and maintaining complete committee records. Assist with policy lifecycle management across Compliance and Privacy, including drafting support, updates, approvals, version control, attestations, and audit documentation. Support auditing and monitoring activities, including evidence collection, remediation tracking, and regulatory readiness initiatives such as HITRUST. Assist with regulatory and business obligation tracking, including licenses, registrations, and other compliance requirements as assigned. Support litigation tracking and insurance-related matters in coordination with Legal and Risk, including maintaining trackers and organizing documentation. Maintain organized, audit-ready compliance and privacy documentation and trackers to support internal and external reviews. Other duties as assigned.