Senior Director, Compliance & Regulatory Affairs

Responsibilities

• Design and oversee all seven elements of an effective, documented OIG compliance program.
• Serve as the designated compliance officer for regulators, payors, and auditors.
• Own written standards, compliance training and education, and program oversight.
• Manage the policy and SOP lifecycle, including authoring, versioning, attestation, and retirement across subsidiaries.
• Maintain the governance framework and map policies to OIG and CMS controls.
• Own HIPAA Privacy and Security programs, including breach response from detection through notification and documentation.
• Serve as or directly support the GDPR Data Protection Officer function.
• Oversee hotline and investigation programs, including intake, triage, root-cause analysis, corrective action, and self-disclosure workflows.
• Own exclusion and sanction screening, conflict-of-interest administration, and Stark Law and non-monetary compensation tracking.
• Design and maintain compliance training across the workforce and clinician network, with direct ownership of OIG Element 3.
• Manage the healthcare investigations, policy and governance, exclusion and sanction screening, and HIPAA and privacy compliance teams.
• Oversee conflict-of-interest and Stark Law/non-monetary compensation functions.
• Prepare board and leadership reporting on program status, risk posture, and open corrective actions.

Requirements

• 12+ years of experience in healthcare compliance or health law.
• End-to-end ownership of a healthcare compliance program.
• Deep working knowledge of the OIG Seven Elements framework.
• Ownership experience for HIPAA Privacy and Security programs.
• Experience managing and developing a compliance team in a multi-state, technology-forward healthcare or pharmacy-adjacent environment.
• Executive presence, sound judgment, and ability to serve as the responsible executive in regulator-facing documentation.
• Ability to influence across Legal, Product, Security, and Clinical teams.
• High integrity and a collaborative, low-ego working style.

Nice-to-haves

• GDPR experience.
• CHC, CHPC, CCEP, or equivalent compliance credential.

Compensation and Benefits

Salaried employees are eligible for:

• Medical, dental, and vision plans
• Flexible Spending Accounts and Health Savings Accounts
• Flexible paid time off
• 401(k) with company match
• Life insurance
• Pet insurance