Director of Compliance and Risk Management

Oklahoma Arthritis Center (OAC) is an Equal Employment Opportunity employer and considers all applicants without regard to race, religion, color, sex, national origin, age, disability, veteran status, or any other legally protected status.

The Director of Compliance & Risk Management is responsible for leading and overseeing Oklahoma Arthritis Center's enterprise compliance, privacy, risk management, and organizational governance functions. This position serves as a strategic advisor to executive leadership and works collaboratively across all departments to promote a culture of integrity, accountability, regulatory compliance, patient privacy, and proactive risk management. The Director is responsible for developing, implementing, monitoring, and continuously improving the organization's compliance and risk management programs while coordinating with internal stakeholders and external legal counsel to mitigate operational, financial, regulatory, reputational, and employment-related risks.

This role serves as the organization's designated Privacy Officer and provides leadership in compliance investigations, policy governance, contract review coordination, risk assessments, regulatory readiness, and organizational growth initiatives. The Director of Compliance & Risk Management serves as a strategic partner to executive leadership and is expected to contribute to organizational growth, operational excellence, and long-term enterprise risk management initiatives.

• Develop and oversee the organization's Compliance Program.
• Serve as the primary compliance resource for executive leadership.
• Monitor healthcare regulatory compliance.

• Develop and oversee the enterprise risk management framework.
• Identify, assess, and mitigate operational, regulatory, financial, employment, privacy, cybersecurity, and reputational risks.

• Serve as Privacy Officer.
• Oversee HIPAA/HITECH compliance and privacy investigations.

• Lead investigations involving compliance concerns and policy violations.
• Partner with HR and coordinate with outside counsel as needed.

• Review contracts, BAAs, NDAs, and employment-related agreements for operational and compliance risks.

• Coordinate audits and corrective action plans.

• Develop compliance training programs and provide regular reports to leadership.

• Oversee policy development, review, implementation, and retention.

• Comprehensive knowledge of healthcare compliance regulations, standards, and industry best practices.
• Thorough understanding of HIPAA, HITECH, CMS regulations, Stark Law, Anti-Kickback Statutes, OSHA requirements, and healthcare privacy laws.
• Knowledge of enterprise risk management principles and methodologies.
• Understanding of employment-related compliance and workplace risk considerations.
• Familiarity with healthcare operations, organizational governance, and business practices.
• Knowledge of contract administration, vendor management, and business associate agreements (BAAs).
• Understanding of cybersecurity principles, privacy safeguards, and data protection best practices.
• Knowledge of auditing, monitoring, corrective action planning, and regulatory readiness processes.
• Understanding of policy governance and organizational compliance frameworks.

• Exceptional leadership and relationship-building skills.
• Strong analytical, critical-thinking, and problem-solving abilities.
• Excellent verbal, written, and presentation communication skills.
• Advanced investigation and root-cause analysis skills.
• Strong strategic planning and organizational skills.
• Strong conflict resolution and employee relations skills.
• Strong policy development, documentation, and process improvement skills.

• Ability to exercise independent judgment, discretion, and sound decision-making.
• Ability to maintain confidentiality while handling sensitive information and investigations.
• Ability to evaluate complex organizational risks and recommend practical business solutions.
• Ability to interpret regulations and apply them effectively within healthcare operations.
• Ability to lead enterprise-wide compliance, privacy, and risk initiatives.
• Ability to conduct audits, investigations, risk assessments, and corrective action planning.
• Ability to establish priorities and coordinate cross-functional initiatives.
• Ability to manage multiple competing priorities and deadlines.
• Ability to build productive working relationships across all levels of the organization.
• Ability to influence organizational culture and promote ethical decision-making.
• Ability to effectively communicate with executive leadership, providers, managers, staff, regulators, and external stakeholders.
• Ability to serve as a trusted advisor to executive leadership…