Sr. Director Healthcare Compliance

Company Overview

More than 35 years ago, Select Quote was founded on one core promise:

More than 35 years ago, Select Quote was founded on one core promise:
to help our customers protect the people they value most
. We pioneered the way consumers shopped for term life insurance, and now, we also help people find home insurance, auto insurance, senior health insurance and more. Our quick and easy process saves consumers both time and money, and today, more than 2 million families trust us to help them with their insurance needs. But what truly sets us apart is our people, and the opportunities to grow your career with Select Quote are unmatched.

The Sr. Director, Healthcare & Data Privacy Compliance is a leadership role, reporting to the Compliance & Risk Officer, responsible for the strategic vision, oversight, and operational execution of the organization's healthcare compliance and data privacy assurance programs. This position serves as the Company’s designated HIPAA Privacy Officer and leads the strategy to safeguard information assets, ensure regulatory compliance, and foster an enterprise-wide culture of data privacy.

This role bridges healthcare operations (such as pharmacy and telehealth) with data security, legal, and executive leadership to ensure compliance readiness across state and federal regulations, technical security standards, and operational workflows.

• This position has direct supervisory responsibilities.

• Manage and lead the healthcare compliance program, guiding long-term goals, tactics, and risk mitigation strategies.
• Develop and Maintain Policies and Procedures:
  Create and update written policies and procedures accessible to all associates, detailing the implementation and operation of the compliance program.
• Respond to Complaints & Audits:
  Lead the research and response to reports of complaints, suspected non-compliance, and audits, including record maintenance and assisting investigations.
• Lead Third Party Offshore Vendor Management:
  Conduct annual audits, security assessments, and required attestations for healthcare business units.
• Analyze and adapt to current federal and state healthcare laws impacting business operations (e.g., HIPAA, Anti-Kickback Statute, Stark Law, False Claims Act).
• Understand and Analyze Regulatory Requirements:
  Knowledge of current federal and state laws impacting program operations. Analyze and prepare written communications regarding these laws for affected business areas.

• Act as the designated HIPAA Privacy Officer:
  • Coordinate regulatory contracting with healthcare service providers, partners, and business owners and maintain up-to-date Business Associate Agreements (BAAs).
  • Notice of Privacy Practices (NPP);
    Develop, distribute, or post an NPP that explains patients' rights regarding their PHI and the organization's privacy practices. Ensure the NPP is updated to reflect changes in regulatory requirements or procedures.
  • Institution-Wide Monitoring:
    Coordinate and track institution-wide monitoring of healthcare data management compliance.
  • Handle Privacy Complaints and Breaches:
    Implement a process for receiving, documenting, tracking, investigating, and acting on all complaints concerning breaches in privacy policies and procedures.
• Ensure sales and marketing practices are compliant
• Provide subject matter expertise for key cybersecurity compliance initiatives, including HITRUST certification, Sarbanes-Oxley (SOX) ITGCs, and CCPA compliance.
• Evaluate and monitor third-party vendor risk and cybersecurity postures in coordination with IT, Legal, and Risk Management.
• Strengthen and manage the cookie management program and related compliance.

• Partner with the Compliance Officer to facilitate and perform annual institution-wide risk assessments to identify privacy, compliance, and cybersecurity vulnerabilities.
• Partner with the Data Security officer to oversee the incident response plan for cybersecurity breaches and privacy violations, ensuring swift investigation, remediation, corrective action plans (CAPs), and mandatory regulatory reporting.
• Assist executive leadership in responding to reports of suspected non-compliance and enforcing disciplinary sanctions when violations occur.

• Design Associate Training:
  Develop a solid associate education and training program that covers healthcare compliance issues such as fraud, waste and abuse.
• Maintain confidential, anonymous reporting hotlines/channels for compliance concerns.
• Report compliance findings, audit results, and governance metrics directly to senior management and regulatory bodies.

• Strategic, results-driven leadership with high ownership and accountability.
• Strong cross-functional collaboration and relationship-building skills across reporting chains.
• Excellent oral, written, and executive presentation…