About the Role

The Sr. Director, Healthcare & Data Privacy Compliance is a leadership role, reporting to the Compliance & Risk Officer, responsible for the strategic vision, oversight, and operational execution of the organization's healthcare compliance and data privacy assurance programs. This position serves as the Company's designated HIPAA Privacy Officer and leads the strategy to safeguard information assets, ensure regulatory compliance, and foster an enterprise-wide culture of data privacy.

This role bridges healthcare operations (such as pharmacy and telehealth) with data security, legal, and executive leadership to ensure compliance readiness across state and federal regulations, technical security standards, and operational workflows.

Supervisory Responsibilities:

• This position has direct supervisory responsibilities.

Essential Duties and Responsibilities:

Healthcare Compliance Oversight

• Manage and lead the healthcare compliance program, guiding long-term goals, tactics, and risk mitigation strategies.
• Develop and Maintain Policies and Procedures: Create and update written policies and procedures accessible to all associates, detailing the implementation and operation of the compliance program.
• Respond to Complaints & Audits: Lead the research and response to reports of complaints, suspected non-compliance, and audits, including record maintenance and assisting investigations.
• Lead Third Party Offshore Vendor Management: Conduct annual audits, security assessments, and required attestations for healthcare business units.
• Analyze and adapt to current federal and state healthcare laws impacting business operations (e.g., HIPAA, Anti-Kickback Statute, Stark Law, False Claims Act).
• Understand and Analyze Regulatory Requirements: Knowledge of current federal and state laws impacting program operations. Analyze and prepare written communications regarding these laws for affected business areas.

Privacy Assurance

• Act as the designated HIPAA Privacy Officer:
  • Coordinate regulatory contracting with healthcare service providers, partners, and business owners and maintain up-to-date Business Associate Agreements (BAAs).
  • Notice of Privacy Practices (NPP); Develop, distribute, or post an NPP that explains patients' rights regarding their PHI and the organization's privacy practices. Ensure the NPP is updated to reflect changes in regulatory requirements or procedures.
  • Institution-Wide Monitoring: Coordinate and track institution-wide monitoring of healthcare data management compliance.
  • Handle Privacy Complaints and Breaches: Implement a process for receiving, documenting, tracking, investigating, and acting on all complaints concerning breaches in privacy policies and procedures.
• Ensure sales and marketing practices are compliant
• Provide subject matter expertise for key cybersecurity compliance initiatives, including HITRUST certification, Sarbanes-Oxley (SOX) ITGCs, and CCPA compliance.
• Evaluate and monitor third-party vendor risk and cybersecurity postures in coordination with IT, Legal, and Risk Management.
• Strengthen and manage the cookie management program and related compliance.

Audit, Risk Assessment & Incident Response

• Partner with the Compliance Officer to facilitate and perform annual institution-wide risk assessments to identify privacy, compliance, and cybersecurity vulnerabilities.
• Partner with the Data Security officer to oversee the incident response plan for cybersecurity breaches and privacy violations, ensuring swift investigation, remediation, corrective action plans (CAPs), and mandatory regulatory reporting.
• Assist executive leadership in responding to reports of suspected non-compliance and enforcing disciplinary sanctions when violations occur.

Education, Training & Communication

• Design Associate Training: Develop a solid associate education and training program that covers healthcare compliance issues such as fraud, waste and abuse.
• Maintain confidential, anonymous reporting hotlines/channels for compliance concerns.
• Report compliance findings, audit results, and governance metrics directly to senior management and regulatory bodies.

Skills/Abilities:

• Strategic, results-driven leadership with high ownership and accountability.
• Strong cross-functional collaboration and relationship-building skills across reporting chains.
• Excellent oral, written, and executive presentation communication skills.
• Expert knowledge of business operational workflows, managing consumer healthcare data and technology infrastructure.
• Ability to handle complex problem-solving and manage multiple high-priority, concurrent projects under tight deadlines.

Education and Experience:

• Bachelor of Science in Healthcare Administration or a related business field required.
• Master's degree in a related business or healthcare field preferred.
• 10-15 years in a compliance/regulatory role supporting business operations.
• Experience working with federal health care agencies and regulators, HIPAA, Anti-kickback and Stark laws.

Certificates/Licenses/Registration:

• Required Healthcare/Privacy Certifications (at least one): CHPC, CHC, or equivalent.

Financial Responsibilities (budget, revenue):

• This position has budget responsibility, authority and/or level of control.

Physical Requirements:

Work is performed indoors with potential for exposure to safety and health hazards related to office work. Could periodically travel to other office and operational sites. The noise level in the work environment is usually moderate.

Prolonged periods of sitting at a desk and working on a computer.

Our Benefits

The Compensation for this position is listed below. Local minimum wage laws apply. This information is posted pursuant to local requirements to provide applicants with information about what they might be eligible to receive. Individual pay decisions will depend on job-related factors such as experience, education, skill, performance, and geographic location where work will be performed.

Successful candidates may be able to participate in one or more incentive compensation or short-term incentive plans, which could generate additional earnings in accordance with the terms of each plan.

We are proud to offer the following benefits:

• Competitive Medical, Dental, and Vision Insurance
• HSA/FSA
• Voluntary Hospital Indemnity, Critical Illness, Accident Insurance, and Short Term Disability
• Voluntary Life Insurance for Self, Spouse and Dependent
• Company-paid Basic Life Insurance and Long Term Disability
• Retirement plan and Employer match contribution with Profit Share
• Tuition Reimbursement program
• Company perks and Discount program
• Engaging Wellness and Financial Education Resources
• Employee Assistance Program
• Incentive Plans

Base Salary Minimum

$160,000

Base Salary Maximum

$190,000