Sr. Director Healthcare Compliance

Job Description

Job Description:\n\nOverview Sr. Director, Healthcare Compliance Job Summary: The Sr. Director, Healthcare & Data Privacy Compliance is a leadership role, reporting to the Compliance & Risk Officer, responsible for the strategic vision, oversight, and operational execution of the organization's healthcare compliance and data privacy assurance programs. This position serves as the Company’s designated HIPAA Privacy Officer and leads the strategy to safeguard information assets, ensure regulatory compliance, and foster an enterprise-wide culture of data privacy. This role bridges healthcare operations (such as pharmacy and telehealth) with data security, legal, and executive leadership to ensure compliance readiness across state and federal regulations, technical security standards, and operational workflows. Supervisory Responsibilities: This position has direct supervisory responsibilities. Essential Duties and Responsibilities: Healthcare Compliance Oversight Manage and lead the healthcare compliance program, guiding long-term goals, tactics, and risk mitigation strategies. Develop and Maintain Policies and Procedures: Create and update written policies and procedures accessible to all associates, detailing the implementation and operation of the compliance program. Respond to Complaints & Audits: Lead the research and response to reports of complaints, suspected non-compliance, and audits, including record maintenance and assisting investigations. Lead Third Party Offshore Vendor Management: Conduct annual audits, security assessments, and required attestations for healthcare business units. Analyze and adapt to current federal and state healthcare laws impacting business operations (e.g., HIPAA, Anti-Kickback Statute, Stark Law, False Claims Act). Understand and Analyze Regulatory Requirements: Knowledge of current federal and state laws impacting program operations. Analyze and prepare written communications regarding these laws for affected business areas. Privacy Assurance Act as the designated HIPAA Privacy Officer: Coordinate regulatory contracting with healthcare service providers, partners, and business owners and maintain up-to-date Business Associate Agreements (BAAs). Notice of Privacy Practices (NPP); Develop, distribute, or post an NPP that explains patients' rights regarding their PHI and the organization's privacy practices. Ensure the NPP is updated to reflect changes in regulatory requirements or procedures. Institution-Wide Monitoring: Coordinate and track institution-wide monitoring of healthcare data management compliance. Handle Privacy Complaints and Breaches: Implement a process for receiving, documenting, tracking, investigating, and acting on all complaints concerning breaches in privacy policies and procedures. Provide subject matter expertise for key cybersecurity compliance initiatives, including HITRUST certification, Sarbanes-Oxley (SOX) ITGCs, and CCPA compliance. Evaluate and monitor third-party vendor risk and cybersecurity postures in coordination with IT, Legal, and Risk Management. Strengthen and manage the cookie management program and related compliance. Audit, Risk Assessment & Incident Response Partner with the Compliance Officer to facilitate and perform annual institution-wide risk assessments to identify privacy, compliance, and cybersecurity vulnerabilities. Partner with the Data Security officer to oversee the incident response plan for cybersecurity breaches and privacy violations, ensuring swift investigation, remediation, corrective action plans (CAPs), and mandatory regulatory reporting. Assist executive leadership in responding to reports of suspected non-compliance and enforcing disciplinary sanctions when violations occur. Education, Training & Communication Design Associate Training: Develop a solid associate education and training program that covers healthcare compliance issues such as fraud, waste and abuse. Maintain confidential, anonymous reporting hotlines/channels for compliance concerns. Report compliance findings, audit results, and governance metrics directly to senior management and regulatory bodies. Skills/Abilities: Strategic, results-driven leadership with high ownership and accountability. Strong cross-functional collaboration and relationship-building skills across reporting chains. Excellent oral, written, and executive presentation communication skills. Expert knowledge of business operational workflows managing consumer healthcare data and technology infrastructure. Ability to handle complex problem-solving and manage multiple high-priority, concurrent projects under tight deadlines. Education and Experience: Bachelor of Science in Healthcare Administration or a related business field required. Master’s degree in a related business or healthcare field preferred. 10-15 years in a compliance/regulatory role supporting business operations. Experience working with federal health care agencies and regulators, HIPAA, Anti-kickback and Stark laws. Certificates/Licenses/Registration: Required Healthcare/Privacy Certifications (at least one): CHPC, CHC, or equivalent. Financial Responsibilities (budget, revenue): This position has budget responsibility, authority and/or level of control. Physical Requirements: Work is performed indoors with potential for exposure to safety and health hazards related to office work. Could periodically travel to other office and operational sites. The noise level in the work environment is usually moderate. Prolonged periods of sitting at a desk and working on a computer. SelectQuote Core Values: Service: We create positive customer experiences. Entrepreneurship: We create innovate & take risks. Leadership: We build & invest in high-performing teams. Empowerment: We embrace a changing environment. Courage: We challenge the status quo & drive continuous improvement. Teamwork: We help support & celebrate each other. Disclaimer: The above statements are intended to describe the general nature and level of work being performed by people assigned to this job. They are not intended to be construed as an exhaustive list of all responsibilities, duties and skills required. Responsibilities More than 35 years ago, SelectQuote was founded on one core promise: to help our customers protect the people they value most. We pioneered the way consumers shopped for term life insurance, and now, we also help people find home insurance, auto insurance, senior health insurance and more. Our quick and easy process saves consumers both time and money, and today, more than 2 million families trust us to help them with their insurance needs.But what truly sets us apart is our people, and the opportunities to grow your career with SelectQuote are unmatched. Qualifications The Sr. Director, Healthcare & Data Privacy Compliance is a leadership role, reporting to the Compliance & Risk Officer, responsible for the strategic vision, oversight, and operational execution of the organization's healthcare compliance and data privacy assurance programs. This position serves as the Company’s designated HIPAA Privacy Officer and leads the strategy to safeguard information assets, ensure regulatory compliance, and foster an enterprise-wide culture of data privacy. This role bridges healthcare operations (such as pharmacy and telehealth) with data security, legal, and executive leadership to ensure compliance readiness across state and federal regulations, technical security standards, and operational workflows. Supervisory Responsibilities: This position has direct supervisory responsibilities. Essential Duties and Responsibilities: Healthcare Compliance OversightManage and lead the healthcare compliance program, guiding long-term goals, tactics, and risk mitigation strategies.Develop and Maintain Policies and Procedures: Create and update written policies and procedures accessible to all associates, detailing the implementation and operation of the compliance program.Respond to Complaints & Audits: Lead the research and response to reports of complaints, suspected non-compliance, and audits, including record maintenance and assisting investigations.Lead Third Party Offshore Vendor Management: Conduct annual audits, security assessments, and required attestations for healthcare business units.Analyze and adapt to current federal and state healthcare laws impacting business operations (e.g., HIPAA, Anti-Kickback Statute, Stark Law, False Claims Act).Understand and Analyze Regulatory Requirements: Knowledge of current federal and state laws impacting program operations. Analyze and prepare written communications regarding these laws for affected business areas. Privacy AssuranceAct as the designated HIPAA Privacy Officer:Coordinate regulatory contracting with healthcare service providers, partners, and business owners and maintain up-to-date Business Associate Agreements (BAAs).Notice of Privacy Practices (NPP); Develop, distribute, or post an NPP that explains patients' rights regarding their PHI and the organization's privacy practices. Ensure the NPP is updated to reflect changes in regulatory requirements or procedures.Institution-Wide Monitoring: Coordinate and track institution-wide monitoring of healthcare data management compliance.Handle Privacy Complaints and Breaches: Implement a process for receiving, documenting, tracking, investigating, and acting on all complaints concerning breaches in privacy policies and procedures.Ensure sales and marketing practices are compliantProvide subject matter expertise for key cybersecurity compliance initiatives, including HITRUST certification, Sarbanes-Oxley (SOX) ITGCs, and CCPA compliance.Evaluate and monitor third-party vendor risk and cybersecurity postures in coordination with IT, Legal, and Risk Management.Strengthen and manage the cookie management program and related compliance. Audit, Risk Assessment & Incident ResponsePartner with the Compliance Officer to facilitate and perform annual institution-wide risk assessments to identify privacy, compliance, and cybersecurity vulnerabilities.Partner with the Data Security officer to oversee the incident response plan for cybersecurity breaches and privacy violations, ensuring swift investigation, remediation, corrective action plans (CAPs), and mandatory regulatory reporting.Assist executive leadership in responding to reports of suspected non-compliance and enforcing disciplinary sanctions when violations occur. Education, Training & CommunicationDesign Associate Training: Develop a solid associate education and training program that covers healthcare compliance issues such as fraud, waste and abuse.Maintain confidential, anonymous reporting hotlines/channels for compliance concerns.Report compliance findings, audit results, and governance metrics directly to senior management and regulatory bodies. Skills/Abilities: Strategic, results-driven leadership with high ownership and accountability.Strong cross-functional collaboration and relationship-building skills across reporting chains.Excellent oral, written, and executive presentation communication skills.Expert knowledge of business operational workflows, managing consumer healthcare data and technology infrastructure.Ability to handle complex problem-solving and manage multiple high-priority, concurrent projects under tight deadlines. Education and Experience: Bachelor of Science in Healthcare Administration or a related business field required.Master’s degree in a related business or healthcare field preferred.10-15 years in a compliance/regulatory role supporting business operations.Experience working with federal health care agencies and regulators, HIPAA, Anti-kickback and Stark laws. Certificates/Licenses/Registration:Required Healthcare/Privacy Certifications (at least one): CHPC, CHC, or equivalent. Financial Responsibilities (budget, revenue):This position has budget responsibility, authority and/or level of control. Physical Requirements: Work is performed indoors with potential for exposure to safety and health hazards related to office work. Could periodically travel to other office and operational sites. The noise level in the work environment is usually moderate. Prolonged periods of sitting at a desk and working on a computer. SelectQuote Core Values: Service: We create positive customer experiences. Entrepreneurship: We create innovate & take risks. Leadership: We build & invest in high-performing teams. Empowerment: We embrace a changing environment. Courage: We challenge the status quo & drive continuous improvement. Teamwork: We help support & celebrate each other. Disclaimer: The above statements are intended to describe the general nature and level of work being performed by people assigned to this job. They are not intended to be construed as an exhaustive list of all responsibilities, duties and skills required. At this time SelectQuote does not hire applicants who solely possess temporary work visas requiring employer sponsorship of any kind including but not limited to OPT, H-1B, L-1, O-1, TN, F-1, J-1, E-3, etc. SelectQuote Insurance Services does not discriminate against any applicant for employment, or any employee because of age, color, sex, disability, national origin, race, religion, or veteran status.