Vice President & Chief Compliance Officer

Summary: The Vice President and Chief Compliance Officer (VP & CCO) serves as UTMB’s senior executive responsible for enterprise-wide compliance, privacy, conflicts of interest, governance, and regulatory risk management. Reporting with independence to executive leadership and compliance governance bodies, the VP & CCO designs, implements, and oversees a comprehensive compliance and ethics program aligned with UT System standards, federal and state requirements, and leading academic medical center best practices.

Scope: Institution-wide

Compliance Program Leadership & Governance

• Provide executive leadership for UTMB’s enterprise compliance, privacy, conflicts of interest, and fraud, waste, and abuse programs.
• Serve as the designated senior compliance officer with authority, independence, and responsibility for program effectiveness, consistent with UT System Regents’ Rules and OIG guidance.
• Establish, maintain, and oversee system wide compliance policies, procedures, standards of conduct, and policy governance structures.
• Chair compliance governance committees and function as an independent, objective authority for evaluating and escalating compliance matters.

Regulatory Compliance & Privacy Oversight

• Ensure compliance with applicable federal and state healthcare laws and regulations, including HIPAA, HITECH, Stark Law, Anti Kickback Statute, False Claims Act, and Conditions of Participation.
• Ensure compliance with privacy laws, including but not limited to HIPAA and FERPA, and is accountable for privacy governance, policy framework, workforce training, and PHI incident and breach response.
• Oversee investigations, corrective actions, and remediation activities in response to identified compliance issues and regulatory findings.

Education, Training & Culture of Compliance

• Design and oversee an enterprise compliance and privacy education strategy, including role based training for workforce members exposed to higher risk activities.
• Ensure ongoing training reflects regulatory changes, industry trends, and internal incident and audit findings.
• Monitor training completion, effectiveness, and continuous improvement of educational methodologies.

Communication & Reporting

• Oversee confidential and anonymous compliance reporting mechanisms, including the compliance hotline, ensuring non retaliation and appropriate response.
• Promote open communication and transparency across clinical, academic, research, and administrative operations.
• Provide structured, timely reporting on compliance risks, trends, and program effectiveness to executive leadership and governance bodies.

Monitoring, Auditing & Risk Assessment

• Lead enterprise compliance risk assessments and ongoing regulatory change monitoring.
• Oversee risk based compliance monitoring, auditing, and assurance activities.
• Maintain enterprise risk reporting, track remediation activities, and provide actionable insights to leadership.
• Conduct third party and vendor compliance, privacy, and security risk assessments.

Enforcement, Accountability & Corrective Action

• Partner with Human Resources, Legal, and leadership to ensure consistent enforcement of compliance standards and disciplinary guidelines.
• Ensure timely investigation, documentation, and resolution of compliance incidents, including hotline matters and conflicts of interest disclosures.
• Use lessons learned from audits, investigations, and incidents to enhance program effectiveness and prevent recurrence.

Operational Integration & Strategic Support

• Collaborate with Legal, IT, Human Resources, Health Information Management, and operational leaders to embed compliance requirements into workflows and business processes.
• Partner with clinical, research, and operational stakeholders to ensure compliant EMR configuration, access controls, and data governance.
• Provide compliance due diligence support for mergers, acquisitions, affiliations, divestitures, and strategic initiatives.
• Maintain confidentiality and adhere to UTMB’s Code of Conduct and the Health Care Compliance Association Code of Ethics.
• Adheres to internal controls and reporting structure.
• Performs related duties as required.

• Mus…