The Chief Compliance and Privacy Officer (CCPRCO) is accountable for the integrity, ethics, privacy, and research compliance program across Tamp General Hospital System - including hospital operations, ambulatory/medical group, academic affiliations, sponsored research, and clinical trials. Reports directly to an Executive Vice President and Board Audit & Compliance Committee.
Essential Functions:- Lead the Enterprise Compliance Program across the AMC system - hospital, medical group, research enterprise, and academic affiliations - ensuring alignment with the OIG's 7 elements of an effective compliance program.
- Serve as principal compliance advisor to the CEO, Cabinet, and Board Audit & Compliance Committee, delivering reporting, risk updates, and executive-session briefings.
- Direct the enterprise HIPAA Privacy & Security Program in partnership with the Chief Information Security Officer (Cyber Security), including breach risk assessments, OCR response, patient rights, and data-sharing governance.
- Oversee the Research Compliance Program, including human subjects protections (Common Rule), FDA GCP, IRB liaison, NIH/PHS conflict of interest, clinical trial billing (Medicare Coverage Analysis), and research misconduct procedures.
- Lead the annual enterprise compliance risk assessment and work plan, translating regulatory change and audit findings into a prioritized, board-approved roadmap.
- Lead internal investigations and government inquiry response - OIG, DOJ, CMS, OCR, FDA, state AG - including disclosures (SRDP, OIG SDP) and Corporate Integrity Agreement (CIA) management.
- Oversee coding, billing, and reimbursement integrity programs, including charge audits, payer audit defense, Stark/Anti-Kickback compliance, 340B, and EMTALA monitoring.
- Direct the Code of Conduct, ethics hotline, and policy architecture, ensuring consistent standards, enterprise training (≥98% completion), and a strong speak-up culture.
- Partner across the system with internal and external stakeholders to embed compliance into clinical, academic, and operational decision-making.
Qualifications- Master's Degree in Business, Health Administration, Nursing, or Doctorate Degree (JD, MD, PhD).
- Certification in Healthcare Compliance, Healthcare Privacy Compliance, Healthcare Research Compliance, or Compliance & Ethics Professional.
Skills & Abilities:- Deep Regulatory Expertise - Comprehensive command of HIPAA Privacy/Security, Stark Law, Anti-Kickback Statute, False Claims Act, EMTALA, 340B, CMS Conditions of Participation, and state healthcare regulations.
- Research Compliance - Working Knowledge of the Common Rule, FDA GCP, NIH/PHS FCOI, AAHRPP accreditation standards, IRB/IACUC oversight, export controls, and clinical trial transparency requirements.
- Investigations & Enforcement Acumen - Proven ability to lead complex internal investigations, manage CIAs, OIG/DOJ/OCR/FDA inquiries, and execute voluntary disclosures with sound legal and ethical judgment.
- Risk Assessment & Data Analytics - Skilled in enterprise risk methodology, compliance auditing, hotline trend analysis, and use of data analytics/AI tools to detect, monitor, and report compliance risk.
- Executive Communication & Board Governance - Ability to translate complex regulatory matters into clear, actionable guidance for the Board, CEO, Deans, faculty, and clinicians, with strong written, verbal, and presentation skills.
- Matrixed Leadership in Academic-Clinical Environments - Demonstrated ability to influence without authority across affiliated universities, faculty practice plans, GME programs, and physician enterprises, balancing independence with collaboration.
- Program Building & Talent Development - Skilled at designing scalable compliance infrastructure, policy frameworks, training programs, and leading multidisciplinary teams in a complex AMC system.
