Director, Corporate Compliance & Privacy

The role

The Director of Corporate Compliance and Privacy will lead and mature healthcare compliance and privacy programs. This leader will build and coach two managers and partner with clinical, operational, technology, and business leaders.

What you will do

• Design, implement, and improve the compliance program in line with federal guidance
• Assess emerging healthcare regulatory and privacy risks
• Report to executive leadership and the Board or Compliance Committee
• Oversee the privacy program including HIPAA and state privacy laws
• Direct privacy incident and breach response
• Oversee privacy reviews of new products, systems, vendors, and data uses
• Oversee the health plan member rights request program
• Serve as a point of contact for privacy regulators
• Lead, develop, and hold accountable the Compliance Manager and the Privacy Manager
• Integrate compliance and privacy risks into the enterprise risk framework

Required qualifications

• Bachelors degree in business or a related field
• 10+ years of professional experience in healthcare compliance, privacy, legal, risk, audit, or a related field
• 5+ years experience building, leading, and coaching teams, including leading managers who in turn lead junior-level staff
• 5+ years of experience and proven ability to build and sustain cross-functional partnerships and influence senior stakeholders
• Project management experience leading and delivering on complex, cross-functional initiatives
• Strong judgment and decisiveness
• Working knowledge of healthcare regulatory requirements including ERISA, the ACA, the Consolidated Appropriations Act, IRS and DOL requirements for HRAs, and state TPA licensing and insurance laws
• Working knowledge of health privacy and security requirements, including HIPAA/HITECH and state privacy laws
• Experience conducting investigations and performing root cause analysis

Nice to have

• MBA, JD, or other advanced degree
• certification such as CHC, CHPC, CCEP, CIPP/US, CIPM, CFE, or PMP
• Experience in healthcare or a comparable regulated environment
• Experience leading both compliance and privacy functions, or integrating them under one leader
• Experience scaling a compliance or privacy function in a growing or changing organization
• Familiarity with compliance and privacy technology, analytics, and case management tools

Benefits

• alternative medicine coverage
• flexible PTO
• up to 16 weeks paid parental leave
• paid holidays
• 401k program
• transportation perks
• education reimbursement
• 2 days of paid paw-ternity leave

About the company

Gravie's mission is to create health benefits that benefit small and midsize businesses and their employees. The company is led by industry veterans and is well capitalized.