Compliance Director / HIPAA Compliance Officer

🏥 Compliance Director

Purpose:
The Compliance Director leads the organization’s regulatory strategy, ensuring enterprise-wide adherence to federal, state, and industry-specific laws—especially in healthcare, insurance, and financial services.

Key Responsibilities:

• Develop and oversee a comprehensive compliance program across departments
• Monitor regulatory changes (e.g., CMS, OCR, DOJ) and update internal policies accordingly
• Conduct internal audits, risk assessments, and corrective action planning
• Serve as liaison to regulatory agencies and external auditors
• Lead compliance training and culture-building initiatives
• Advise executive leadership on legal and reputational risk exposure
• Oversee business associate agreements and vendor compliance

Ideal Background:

• Bachelor’s or Master’s in Law, Healthcare Administration, Risk Management, or related field
• Certifications: CHC (Certified in Healthcare Compliance), CRCM, or similar
• 7+ years in compliance leadership, preferably in healthcare or insurance
• Strong grasp of HIPAA, HITECH, Anti-Kickback Statute, Stark Law, and CMS guidelines

 

🛡️ HIPAA Compliance Officer

Purpose:
The HIPAA Compliance Officer ensures the organization’s full compliance with the HIPAA Privacy, Security, and Breach Notification Rules, safeguarding Protected Health Information (PHI) across all systems and workflows.

Key Responsibilities:

• Develop and maintain HIPAA-compliant privacy and security programs
• Conduct risk assessments and implement mitigation strategies
• Oversee employee training on HIPAA policies and PHI handling
• Monitor and investigate potential breaches; report to HHS/OCR as required
• Coordinate with IT and legal teams on ePHI safeguards and incident response
• Maintain documentation of compliance efforts and audit readiness
• Stay current with federal and state privacy laws (e.g., HITECH, HB 300 in Texas)

Ideal Background:

• Bachelor’s in Health Information Management, Law, or IT Security
• Certifications: CHPS, CHP, HCISPP, or equivalent
• Experience in healthcare operations, privacy law, and security protocols
• Strong understanding of administrative, physical, and technical safeguards