Vice President of PBM Compliance and Regulatory Operations

Job Description

We wanted a PBM that worked better. So we took a bold approach...

\n

\n

When we set out in 2011 as Southern Scripts to reshape pharmacy benefit management, it was because we believed there was a better way. Throughout our journey, we’ve never been afraid to challenge widely accepted industry practices or to pioneer a better model. We see that the concept of “transparency” is gaining momentum. At Liviniti , we’ve been delivering it for more than a decade.

\n

\n

Liviniti , grew from a commitment to offer an uncomplicated approach to managing pharmacy benefits. One based on transparency, affordability, quality, service and innovation. Our name describes the future that we envision - one with infinite possibilities for better living.

\n

\n

Join a team that is reshaping pharmacy benefit management! At Liviniti , we give people the runway to do their best work. We seek people who analyze, challenge and think outside the box – and reward them with an environment and benefits that support their professional and personal goals.

\n

\n

We are currently seeking a Vice President of PBM Compliance and Regulatory Operations . This role can be hybrid (office and remote). Ideal candidates reside in or around Natchitoches, Louisiana.

\n

\n

Role and Responsibilities

\n

The Vice President, PBM Compliance and Regulatory Operations is responsible for building, leading, and operating Liviniti’s PBM compliance and privacy functions to ensure adherence to all applicable state and federal laws and regulations, including PBM-specific requirements and HIPAA, HITECH, ERISA-related disclosures, and the Consolidated Appropriations Act (CAA). This role translates regulatory and privacy obligations into operational workflows, system logic, controls, and audit-ready processes, embedding compliance into day-to-day business operations. The role owns PBM regulatory compliance, market conduct exam readiness, and privacy operations, including oversight of HIPAA incidents, breach response, corrective action plans, and ongoing risk mitigation. Partnering closely with Legal, Operations, Product, and Technology teams, this position does not act as a plan fiduciary or manage client ERISA compliance, but ensures PBM operations, data, disclosures, and privacy practices meet all regulatory and contractual requirements as an integral member of the Legal and Compliance leadership team. The Vice President, PBM Compliance and Regulatory Operations is required to perform, but not limited to, the following duties and professionally undertake the following key responsibilities:

\n

Build and Implement the Compliance Function

\n

\n
• Stand up the compliance program and drive full implementation across the business.
\n
• Develop company and departmental policies and procedures and convert them into actionable workflows, controls, and system requirements.
\n
• Establish governance, reporting, and accountability mechanisms that are actively used and adhered to
\n

\n

State PBM Regulatory Compliance

\n

\n
• Own and maintain a state-by-state regulatory inventory and monitoring process.
\n
• Translate regulatory requirements into specific business rules and system configurations.
\n
• Partner with operations and technology to implement requirements in areas such as claims adjudication, NADAC, MAC pricing, pharmacy network standards, and appeals processes.
\n
• Validate that requirements are correctly implemented and functioning in practice.
\n

\n

Market Conduct Exam Readiness

\n

\n
• Build and maintain a continuous state of market conduct exam readiness.
\n
• Develop documentation, evidence repositories, and audit trails tied to actual operations.
\n
• Conduct internal readiness reviews and mock exams.
\n
• Lead regulatory exams, including data requests, responses, and remediation efforts.
\n

\n

Systems, Controls, and Monitoring

\n

\n
• Design and implement system-based compliance controls and automated edits within PBM platforms.
\n
• Work closely with technology teams to embed compliance with claims logic and operational workflows.
\n
• Establish ongoing monitoring, including control testing, exception reporting, and data validation.
\n
• Develop dashboards and reporting to track compliance performance and risk.
\n

\n

CAA and Gag Clause Compliance (PBM scope)

\n

\n
• Oversee PBM responsibilities under the Consolidated Appropriations Act (CAA)
\n
• Support and validate data for RxDC reporting.
\n
• Ensure compliance with gag clause requirements and support related attestations.
\n
• Build controlled, repeatable processes for cross-functional data aggregation and reporting.
\n
• Ensure outputs are accurate, documented, and audit ready.
\n

\n

Audit, Risk, and Third-Party Oversight

\n

\n
• Build a risk-based audit and monitoring program aligned to regulatory exposure.
\n
• Identify control gaps and drive remediation with business owners.
\n
• Oversee compliance of pharmacies, vendors, and downstream partners.
\n

\n

Privacy Governance & HIPAA Oversight

\n

\n
• Provide executive leadership for the organization’s HIPAA Privacy, Security, and Breach Notification Compliance programs, ensuring alignment with enterprise compliance and regulatory strategy.
\n
• Oversee development and maintenance of HIPAA policies, standards, and procedures and integration into business and operational processes.
\n
• Interpret and operationalize federal and state health privacy regulations into actionable compliance controls and requirements.
\n
• Partner with Legal, Information Security, IT, HR, and business leaders to embed privacy compliance across the organization and third-party relationships.
\n
• Report on privacy risk posture, key metrics, and emerging issues to executive leadership and governance bodies
\n

\n

HIPAA Incident Management & Corrective Action

\n

\n
• Developing and updating HIPAA policies and procedures within the company
\n
• Serve as executive lead for HIPAA-related incidents, overseeing intake, investigation, risk assessment, and breach determination.
\n
• Ensure timely, accurate, and compliant breach notifications to affected individuals, regulators, and other required stakeholders.
\n
• Direct development and execution of corrective action and remediation plans, addressing root causes and control gaps.
\n
• Oversee regulatory interactions related to privacy incidents, including OCR inquiries, audits, and enforcement actions, in coordination with Legal.
\n
• Monitor and validate the effectiveness of remediation efforts and drive continuous improvement to prevent recurrence.
\n

\n

Leadership and Execution

\n

\n
• Operate as a hands-on leader, directly owning key deliverables in early stages.
\n
• Build and scale the compliance team over time.
\n
• Serve as primary point of contact for regulators, auditors, and external counsel.
\n
• Provide regular reporting and insight into executive leadership.
\n

\n

\n

What We Have to Offer

\n

Our benefits package is designed to keep our employees happy and healthy – physically, mentally and financially.

\n

\n
• Servant Culture
\n
• Medical, Dental, Vision insurance
\n
• Disability and Life insurance
\n
• Employee Assistance Program
\n
• Remote work options
\n
• Generous Paid-Time Off
\n
• Annual Reviews and Development Plans
\n
• Retirement Plan with company match immediately 100% vested
\n

\n

\n

Required Skills and Competencies

\n

\n
• Ability to review and interpret state and federal guidelines and translate them into practical, operational solutions.
\n
• Executive-level leadership skills with experience building and leading high-performing compliance or regulatory operations teams.
\n
• Sound judgment and decision-making in ambiguity, escalation, and regulatory risk scenarios.
\n
• Strong understanding of controls, audit readiness, and documentation
\n
• Ability to balance compliance rigor with business enablement.
\n
• Strategic mindset with the ability to anticipate regulatory trends and proactively prepare the organization.
\n
• Strong analytical skills to assess operational risk, data flows, and system impacts of regulatory requirements.
\n
• Exceptional written and verbal communication skills, including the ability to explain regulatory requirements clearly to non-legal audiences.
\n
• Willing to challenge and push teams to implement, not defer.
\n
• Execution-oriented and comfortable working in the details
\n
• Effective in ambiguous, fast-moving environments
\n
• Ability to work independently and collaboratively in a team environment.
\n

\n

\n

Success Metrics (First 12 Months)

\n

\n
• Compliance program implemented and operating across core PBM functions
\n
• State PBM regulatory requirements translated into system logic and operational workflows.
\n
• Organization maintains ongoing market conduct exam readiness with complete documentation and evidence.
\n
• System-based controls and monitoring in place with measurable performance indicators
\n
• CAA-related PBM processes operational, repeatable, and audit-ready.
\n
• All HIPAA incidents are identified, investigated, and resolved within required regulatory timeframes, with accurate breach determinations and compliant notifications.
\n
• Corrective actions address root causes and control gaps, with validation showing measurable reduction in repeat incidents and improved privacy control effectiveness.
\n

\n

\n

Supervisory Responsibility

\n

This position supervises the Compliance Staff

\n

\n

Position Type and Expected Hours of Work

\n

Some flexibility in hours is allowed, but the employee must be available during the “core” work hours of 8:00AM to 5:00PM CT. The company covers clients from West to East Coast; work times must be adjusted to cover meetings in all time zones. Ability to work extended hours, weekends, and holidays pursuant with industry demands.

\n

\n

Travel

\n

Limited travel expected for this position.

\n

\n

Required Education and Experience

\n

\n
• Bachelor's degree (B.A.) in Law, Healthcare Administration, Business Administration, Public Health, Pharmacy, or a related field or 2+ years of related experience and/or training; or equivalent combination of education and experience
\n
• High degree of professional ethicsand integrity
\n
• Sound judgement and ability to analyze situations and information.
\n

\n

\n

Preferred Education and Experience

\n

\n
• Juris Doctor (JD) or equivalent legal background strongly preferred.
\n
• 10+ years of experience in healthcare compliance, PBM, health plan, or similar regulated environment
\n
• Demonstrated experience implementing regulatory requirements into operations, systems, or workflows.
\n
• Strong knowledge of state PBM laws or comparable multi-state regulatory frameworks
\n
• Experience supporting market conduct exams, audits, or regulatory reviews.
\n
• Proven ability to work cross-functionally with technology, operations, legal, and finance teams.
\n

\n

\n

\n

Liviniti, LLC provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, or genetics. In addition to federal law requirements, Liviniti complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

\n

\n

Liviniti expressly prohibits any form of workplace harassment based on race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status. Improper interference with the ability of Liviniti employees to perform their job duties may result in discipline up to and including discharge. EOE M/F/V/D

\n