Senior Manager, Healthcare Privacy and Compliance

Minimum of 5 years of experience leading healthcare data compliance initiatives with multiple cross-functional stakeholders. Deep understanding of implementing and assessing controls in complex environments. Strong knowledge of HIPAA, HITRUST, SOC2, and other relevant regulatory standards. Strong written and verbal communication skills. Strong analytical, problem-solving, and communication skills. Exceptional attention to detail and commitment to ethical standards. Ability to collaborate effectively with cross-functional teams and communicate compliance requirements clearly. Diverse security and IT background (policy, IT service management, networking, infrastructure, application development, information security standards). Self-motivated; able to work with minimal supervision.

Lead the development, implementation, and continuous improvement of a healthcare privacy and compliance program. Ensure operations meet regulatory, governance, and client standards (HIPAA, HITRUST, SOC2, Medicare/Medicaid). Identify and mitigate enterprise-wide compliance risks. Foster a culture of accountability, data security, and ethical practices. Collaborate with executive leadership, business units, IT, security, and internal departments. Promote compliance awareness and provide training. Develop, update, and enforce policies and procedures. Oversee and improve the auditing program. Serve as a trusted advisor on certifications, regulations, and best practices. Chair and manage the compliance committee. Monitor, assess, and document compliance risks. Coordinate risk mitigation plans. Develop and execute an incident response plan. Design and deliver training programs. Maintain accurate compliance records and reports. Establish and track performance measures for compliance initiatives. Collaborate on business continuity planning aligned with compliance requirements. Lead security risk assessments for clients.