What you'll be doing
- Design, implement and manage the company's compliance programs, including ensuring the programs remain effective and responsive to shifting organizational needs and concerns along with changes in relevant laws and regulations that impact company operations.
- Provide leadership for the development and execution of plans for regulatory approval, as well as expertise in translating regulatory requirements into workable strategies.
- Work closely when necessary, with federal, state, and local regulatory agencies and personnel on specific issues affecting the organization.
- Act as adviser to the organization on regulatory issues.
- Build, administer, and audit company policies, including writing and reviewing policies, and provide guidance to departments and business units on both standard operating procedures development and key policy provisions.
- Develop and deliver compliance and privacy trainings and drive development of new training as needed.
- Develop annual compliance audit workplan and oversee its execution.
- Supervise and manage independent investigations on matters related to compliance and privacy.
- Develop and oversee implementation of corrective action plans for resolution of compliance and privacy related matters.
- Leverage industry and technical expertise to identify and advise around compliance risks.
- Assess current data workflows for compliance risks and support new vendor and solution evaluations. Target messages to different audiences (business, data, technology, etc.) is essential to engage and establish credibility with a broad spectrum of stakeholders.
- Collaborate with the leadership team to develop and execute the company's overall business plan and align our regulatory and compliance strategy with the company's goals
- Establish active relationships with the company's executives, business leaders, and members of their teams.
What we need - Excellent verbal and written communication skills including the ability to prepare documentation, reports, and build consensus across a broad group including senior-level management and key stakeholders.
- Excellent project management skills including the ability to prepare, prioritize and complete work plans independently.
- Decision-making and problem-solving skills including the ability to clearly define and resolve issues or make recommendations.
- Sound business acumen and strategy execution
- At least five (5) years of healthcare or consumer reporting compliance experience including developing and overseeing written guidance, compliance training/audit, and investigations.
- 10+ years of relevant experience
- Thorough knowledge of HIPAA (HIPAA Privacy Rule, Security Rule, and Breach Notification Rule), HITECH, key state data privacy laws, and other relevant laws and regulations
What you bring to the table
- Ability to tackle a problem by using a logical, systematic, sequential approach to generate sensible, realistic, practical solutions to problems
- Expertise in handling both identified and de-identified data sets, along with a deep understanding of the specific privacy frameworks associated with each.
- Ability to comprehend and interpret technical solutions and designs in order to effectively guide teams in building systems that comply with regulations.
- Verify important details, ensures there are no surprises or gaps in needed information
- Generate new approaches to problems or innovations to established approaches; thinks and looks outside the box
- Deal effectively not just with concrete, tangible issues but with abstract, conceptual matters
- Demonstrate the ability to evaluate information using a variety of proven methods and techniques
- Analyze data to draw conclusions and identify cause and effect relationships to support leadership decisions, and recommend a course of action, or solve organizational issues
Nesco Resource provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.