Director, Corporate Compliance – Privacy

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee and advance Gravie's healthcare compliance and privacy initiatives.

• Mentor and develop the Compliance Manager and Privacy Manager, who supervise junior teams.

• Create, execute, and enhance the compliance program, which includes policies, training, monitoring, auditing, and reporting.

• Evaluate emerging healthcare regulatory and privacy risks and translate them into risk-based controls.

• Communicate program effectiveness, risks, and trends to executive leadership and the Board or Compliance Committee.

• Supervise HIPAA, state health privacy, consumer data privacy, policies, notices, and training.

• Lead privacy incident and breach response, including risk assessments and necessary notifications.

• Manage privacy evaluations of products, systems, vendors, data usage, privacy impact assessments, and business associate agreements.

• Oversee member rights requests for health plans.

• Act as a liaison for privacy regulators and align privacy and security controls.

• Lead, develop, and hold managers accountable, setting priorities, work division, resource allocation, and succession planning.

• Foster trusted cross-functional relationships and integrate compliance and privacy into business decisions.

• Incorporate compliance and privacy risks into the enterprise risk framework alongside Enterprise Risk Management and Internal Audit.

• Direct investigations, remediation, auditing, monitoring, hotline and case management, exclusion screening, and corrective action tracking.

• Create metrics, dashboards, SLAs, reports, and quarterly presentations for the Compliance Committee.

• Manage relationships with regulators, external counsel, and auditors.

• Plan and implement concurrent compliance and privacy initiatives, including policy revisions, system deployments, audit remediation, and regulatory readiness activities.

⛳️ Requirements

• Bachelor's degree in business or a related discipline.

• More than 10 years of professional experience in healthcare compliance, privacy, legal, risk, audit, or similar fields.

• At least 5 years of experience in building, leading, and mentoring teams, including managing those who supervise junior staff.

• Minimum of 5 years of experience in developing and maintaining cross-functional partnerships and influencing senior stakeholders.

• Experience in project management, leading and delivering complex, cross-functional initiatives.

• Strong judgment and decisiveness in uncertain and time-sensitive situations.

• Familiarity with ERISA, the ACA, the Consolidated Appropriations Act, IRS and DOL requirements for HRAs, and state TPA licensing and insurance regulations.

• Knowledge of HIPAA/HITECH, breach notification regulations, and state privacy laws.

• Experience in conducting investigations and root cause analyses.

• Preferred: MBA, JD, other advanced degrees, or certifications such as CHC, CHPC, CCEP, CIPP/US, CIPM, CFE, or PMP.

• Experience in healthcare or a similarly regulated environment is preferred.

• Experience in leading compliance and privacy functions is preferred.

• Experience in scaling a compliance or privacy function is preferred.

• Familiarity with compliance and privacy technology, analytics, and case management tools is preferred.

• Authorization to work in the United States.

🏝️ Benefits

• Coverage for alternative medicine.

• Flexible Paid Time Off (PTO).

• Up to 16 weeks of paid parental leave.

• Paid holidays.

• 401(k) retirement plan.

• Transportation benefits.

• Education reimbursement.

• 2 days of paid paw-ternity leave.

• Equity options.

• Bonus opportunities.