Director, Compliance

This is a fully remote position, open to applicants in United States.

📋 Description

• Responsible for the operational execution of privacy and ROI compliance across designated portfolios, regions, or client segments.

• Assists the Chief Privacy Officer in establishing privacy strategies and evaluating risks, including potential state and/or federal regulations impacting the organization.

• Analyzes HIPAA, state medical record laws, and client contract stipulations, transforming them into Sharecare ROI policies, SOPs, training resources, and quality controls.

• Guarantees the uniform application of request processing standards, which encompass authorizations, TAT requirements, disclosure limitations, and fee regulations.

• Ensures that Sharecare's policies and procedures concerning Release of Information (ROI) are systematically maintained, organized, and updated as necessary, with timely completion of any required changes.

• Leads and facilitates internal audits, client audits, and regulatory inquiries (e.g., OCR investigations, client compliance reviews), including the formulation of audit response strategies, documentation, and corrective measures.

• Exercises significant discretion in compliance decisions that impact multiple clients, teams, or regions; escalates enterprise risks to the Chief Privacy Officer as needed.

• Conducts root-cause analysis for audit results, client escalations, and compliance incidents, driving the execution of sustainable remediation plans to resolution.

• Manages the investigation and documentation of all privacy and security incidents and ensures that necessary reporting is conducted according to applicable requirements.

• Collaborates with the Security Department to audit security and privacy systems, ensuring compliance with relevant laws and regulations, including but not limited to HIPAA, HITECH, and Omnibus, in relation to Sharecare’s role as a Business Associate.

• Works closely with Legal, Compliance, Security, Product, Operations, Sales, and Client Success leadership to synchronize operational practices with compliance and business goals.

• Integrates compliance requirements and quality controls into implementations, integrations, product adoption, renewals, and expansions.

• Acts as a senior escalation point and engages in complex compliance discussions with clients, including sensitive disclosures and multi-state compliance scenarios.

• Maintains robust relationships with HIM leaders and enterprise stakeholders; fosters client trust, renewal outcomes, and long-term business performance through consistent compliance execution.

• Oversees experienced professionals and/or subordinate analysts, being accountable for compliance results across assigned client portfolios.

• Partners with Learning and Development on all necessary training for Sharecare personnel, including annual HIPAA training, biannual CRIS certification (if applicable), onboarding training, and policy/procedure training regarding privacy and security.

• Serves as a resource for compliance inquiries from Sharecare field staff and operational leaders.

• Actively engages in local Health Information Association and/or other comparable organizations.

• Conducts seminars/webinars for clients and potential clients on topics like HIPAA, HITECH, internal auditing, ROI compliance, and operational privacy best practices.

• Manages designated audit and compliance programs across Sharecare and participates in project teams as needed.

⛳️ Requirements

• Bachelor’s degree required; Master’s degree preferred; or equivalent experience.

• Typically requires 8–10+ years of experience in ROI operations, privacy, compliance, and/or client success, including leadership responsibilities.

• Preferred privacy credentials include RHIA, CHPS, CHPC, or equivalent.

• Must possess experience with or expertise in: HIPAA / HITECH / Omnibus Final Rule.

• Knowledge of Office for Civil Rights guidance and processes; regulatory inquiry and audit response.

• Familiarity with federal ROI requirements and state medical record/privacy laws and fee regulations, including multi-state operational implications.

• Skilled in operationalizing privacy requirements into policies, SOPs, training, and quality controls at scale.

• Experience in leading internal/client audits, root-cause analysis, corrective action planning, and sustainable remediation.

• Proficient in incident investigation, documentation, and collaborative breach/incident response with Security and Legal teams.

• Demonstrated cross-functional leadership with Product, Operations, Legal, Security, Sales, and Client Success, with the ability to integrate compliance into implementations, product adoption, renewals, and expansions.

• Strong executive presence and adeptness in client interactions, including participation in escalated discussions with clients and, when necessary, regulators.

• Excellent written and verbal communication skills.

• Well-versed in current EHR technology, with practical experience using systems like Epic, Allscripts, Cerner, NextGen, or similar (preferred).

🏝️ Benefits

• Health insurance

• Paid time off

• Flexible work arrangements

• Professional development opportunities