Compliance Manager & Privacy Officer

Job Description

Summary

\n

\n

We are seeking an experienced Compliance Manager & Privacy Officer to oversee the day-to-day operations of a corporate compliance program and serve as its designated HIPAA Privacy Officer.

\n

Reporting to the senior legal executive, this position plays a critical role in managing regulatory compliance, protecting sensitive information, identifying and mitigating organizational risk, and promoting a culture of ethical conduct and accountability.

\n

\n

\n

The ideal candidate is a collaborative, detail-oriented professional who brings strong knowledge of healthcare compliance and privacy regulations, sound judgment, and the ability to translate complex regulatory requirements into practical business solutions. This position also provides leadership and oversight to a small team of compliance staff.

\n

\n

\n

Job Duties

\n

\n

\n
• Manage daily operations of the corporate compliance program, ensuring adherence to applicable federal and state laws, regulations, and organizational policies.
\n
• Serve as the designated HIPAA Privacy Officer, overseeing privacy compliance, protected health information practices, individual rights requests, and privacy-related policies and procedures.
\n
• Lead annual compliance and privacy risk assessments, develop auditing and monitoring plans, identify areas of potential exposure, and coordinate corrective actions.
\n
• Oversee the investigation and resolution of privacy complaints, potential breaches, compliance concerns, and reports received through the organization's compliance hotline.
\n
• Develop, maintain, and implement compliance policies, procedures, and training programs, including HIPAA training and the organization's Code of Conduct.
\n
• Monitor changes in industry regulations; assess their operational impact; and partner with business leaders to implement necessary changes.
\n
• Coordinate required regulatory filings, licensing activities, regulatory examinations, audits, reporting, remediation activities, and communications with federal and state regulatory authorities.
\n
• Collaborate with Information Security and other departments to ensure appropriate privacy and security practices, vendor agreements, and regulatory safeguards.
\n
• Support the Compliance Committee and prepare compliance reports, metrics, and updates for executive leadership and the board of directors.
\n
• Oversee vendor and third-party compliance, including required screening activities.
\n
• Maintain business continuity plans and participate in organizational crisis response and business interruption planning.
\n
• Provide leadership and supervision to a small team of compliance staff, monitoring quality, productivity, timeliness, and regulatory compliance.
\n
• Partner with Legal and operational teams to resolve escalated compliance issues and identify opportunities for process improvement.
\n
• Serve as a trusted compliance resource, providing guidance and recommendations to employees and leaders across the organization.
\n

\n

\n

\n

\n

Required Qualifications

\n

\n

\n
• Bachelor's degree from an accredited university in business, health administration, or a related field.
\n
• 3–5 years of progressively responsible experience in compliance and privacy, including experience administering compliance or privacy programs.
\n
• Minimum of two years of supervisory experience.
\n
• Working knowledge of healthcare privacy laws (e.g., HIPAA), insurance regulatory requirements, and benefits administration.
\n
• Experience coordinating with federal and state regulatory agencies.
\n
• Strong analytical and problem-solving skills, with demonstrated ability to identify risks, recommend solutions, and escalate significant compliance concerns appropriately.
\n
• Excellent organizational and project-management skills, with the ability to manage multiple priorities and deadlines.
\n
• Strong written and verbal communication skills, including experience drafting policies, compliance reports, and regulatory correspondence.
\n
• Ability to build effective working relationships, influence stakeholders, and communicate complex regulatory requirements to individuals at all levels of an organization.
\n
• High degree of integrity, professionalism, discretion, and sound judgment.
\n
• Valid driver's license and flexibility to work outside normal business hours or off-site when necessary.
\n

\n

\n

\n

Preferred Qualifications

\n

\n

\n
• Master's degree or Juris Doctor (JD).
\n
• Certified in Healthcare Compliance (CHC).
\n
• Certified in Healthcare Privacy Compliance (CHPC) or Certified Information Privacy Professional/United States (CIPP/US).
\n

\n