Vice President, Compliance & Risk Management

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop, implement, and continually enhance the compliance program, policies, and procedures to align with OIG/CMS expectations and industry best practices.

• Establish and sustain an enterprise risk management framework that identifies, evaluates, mitigates, and monitors key risks including clinical, operational, financial, regulatory, and reputational aspects.

• Assist in federal and state surveys, audits, and oversight activities.

• Oversee the intake, triage, and investigation of hotline reports, complaints, and potential violations; ensure thorough documentation, confidentiality, root cause analysis, and corrective actions are consistently applied.

• Collaborate with Privacy and Information Security leaders on managing HIPAA/privacy incidents, conducting breach risk assessments, developing mitigation plans, and fulfilling required notifications.

• Create and manage a risk-based annual work plan; supervise auditing and monitoring activities (e.g., EMTALA, billing/claims, documentation, patient rights, conflicts of interest) while tracking trends and outcomes.

• Spearhead the development, implementation, and verification of corrective action plans; establish ownership, milestones, and metrics for effectiveness.

• Design and oversee compliance and risk training programs; foster a speak-up culture, ensure non-retaliation, and integrate compliance requirements into operations.

• Prepare and deliver compliance/risk metrics, significant issues, and program updates to executive leadership, committees, and Boards; provide advice on risk tolerance and escalation decisions.

• Supervise the development, review, and maintenance of compliance and risk-related policies, standards, and guidance; ensure policies are actionable and accessible.

• Collaborate on third-party due diligence and contracting controls affecting compliance, privacy, and security obligations.

• In conjunction with Legal and Risk, coordinate the intake and tracking of litigation matters affecting the organization; assist with document retention, legal holds, discovery readiness, and record collection; monitor trends, reserves/exposure (as appropriate), and remediation efforts to mitigate future risks.

• Partner with Legal, Quality/Patient Safety, and insurance stakeholders on claim trends, event investigations, and risk mitigation strategies as relevant to the organization.

• Recruit, develop, and lead a high-performing team; set goals, performance expectations, and foster a continuous improvement culture.

⛳️ Requirements

• Bachelor’s degree in healthcare administration, public health, risk management, law, or a related field (or equivalent experience).

• Over 10 years of progressive experience in healthcare compliance and risk management within a hospital, health system, or similarly regulated healthcare environment.

• Proven knowledge of healthcare regulatory requirements and enforcement expectations (e.g., HIPAA/privacy, EMTALA, fraud/waste/abuse, billing/claims compliance, patient rights, accreditation/survey readiness, incident reporting).

• Experience in leading investigations, audits/monitoring, and developing corrective action plans with measurable outcomes.

• Established executive presence and capability to influence senior leaders and clinicians through clear, practical guidance.

• Strong written and verbal communication skills, including the ability to report at the Board level.

• Ability to manage sensitive matters with discretion and uphold confidentiality.

🏝️ Benefits

• Health insurance

• 401(k) matching

• Paid time off

• Flexible work arrangements

• Professional development opportunities