Director, Compliance - Remote

📋 Description

• • Owns operational execution of privacy and Release of Information (ROI) compliance across assigned portfolios, regions, or client segments, ensuring adherence to HIPAA, state medical record laws, and client contract requirements.
• • Interprets federal and state regulations including HIPAA, HITECH, and the Omnibus Final Rule, and translates them into scalable Sharecare policies, standard operating procedures (SOPs), training materials, and quality controls.
• • Supports the Chief Privacy Officer in developing enterprise privacy strategy and assessing emerging regulatory risks from state and federal legislation affecting Sharecare’s operations.
• • Ensures consistent application of ROI processing standards including authorization validity, turnaround time (TAT) requirements, disclosure limitations, and state-specific fee rules across all client engagements.
• • Leads and manages internal audits, client audits, and regulatory inquiries (e.g., OCR investigations), developing response strategies, documentation packages, and corrective action plans to achieve compliance.
• • Conducts root-cause analysis for audit findings, client escalations, and compliance incidents, driving sustainable remediation plans to closure and preventing recurrence.
• • Oversees the investigation and documentation of all privacy and security incidents, ensuring timely and accurate reporting in accordance with federal and state obligations.
• • Partners with the Security Department to conduct audits of privacy and security systems to verify compliance with HIPAA, HITECH, and Omnibus requirements as a Business Associate.
• • Embeds compliance requirements and quality controls into product implementations, integrations, renewals, and expansions across client segments and business units.
• • Serves as a senior external-facing leader in escalated compliance discussions with clients, regulators, and auditors, including multi-state regulatory scenarios and sensitive disclosure matters.
• • Manages a team of experienced professionals and subordinate analysts, holding them accountable for compliance outcomes within assigned client portfolios.
• • Collaborates with Learning and Development to design, deliver, and maintain mandatory training programs including annual HIPAA training, biannual CRIS certification, onboarding, and policy-specific instruction.
• • Acts as a primary resource for Sharecare field staff and operational leaders, answering complex compliance questions and providing operational guidance.
• • Writes internal training briefs, policy documents, and operational guidance on privacy, security, and ROI compliance topics.
• • Participates in local Health Information Management associations and industry organizations to stay current on regulatory trends and best practices.
• • Conducts client-facing seminars and webinars on HIPAA, HITECH, internal auditing, ROI compliance, and operational privacy best practices.
• • Manages assigned audit and compliance programs across Sharecare, joining cross-functional project teams as needed to ensure compliance alignment.
• • Maintains accurate, organized, and up-to-date ROI policies and procedures, ensuring timely updates in response to regulatory or client-driven changes.
• • Ensures corporate integrity by maintaining strict confidentiality of patient, employee, and volunteer information and accessing such data only on a need-to-know basis for business purposes.
• • Maintains current, valid HIPAA certification on an annual basis as required by company policy and regulatory obligations.
• • Reports unethical, fraudulent, or unlawful activity in accordance with Sharecare’s corporate compliance protocols.