Compliance Officer, Healthcare

Established in 1980, the Greater Lawrence Family Health Center (GLFHC) is a multi‑site mission‑driven non‑profit organization employing over 700 staff whose primary focus is providing the highest quality patient care to residents throughout the Merrimack Valley. Nationally recognized as a leader in community medicine (family practice, pediatrics, internal medicine, and geriatrics), GLFHC has clinical sites throughout the service area and is the sponsoring organization for the Lawrence Family Medicine Residency program.

GLFHC is currently seeking a Compliance Officer to join our team. The Compliance Officer is responsible for overseeing the development, implementation, and daily operations of the Health Center’s Corporate Compliance Program, promoting compliance with applicable federal, state, and local regulations; ensuring adherence to internal policies and Standards of Conduct; managing the incident reporting process; and serving as the organization’s HIPAA Privacy Official.

The Compliance Officer works collaboratively across departments to monitor compliance risks, support staff education, and maintain regulatory readiness.

• Compliance Program Leadership
  • Oversee implementation and maintenance of the Corporate Compliance Program and annual Compliance Work Plan.
  • Ensure organizational adherence to compliance policies, procedures, and Standards of Conduct.
  • Promote awareness of compliance obligations through communication and education initiatives, including education on the Compliance Hotline.
  • Serve as primary liaison for Compliance for staff and leadership.
  • Provide regular reports to the CEO and quarterly reports to the Board/Board Committee.
• Policy & Procedure Governance
  • Coordinate development, annual review, revision, approval, and retirement of policies and procedures.
  • Ensure policies are regulatory compliant, consistent, and properly formatted.
  • Maintain a centralized, accessible Policy & Procedure repository and MOU/MOA/contract repository.
  • Track policy lifecycle timelines and maintain historical and archived versions.
• Incident Reporting & Internal Monitoring
  • Administer the electronic incident reporting system, ensuring it is functional and accessible.
  • Provide user training and support.
    
    Assign incidents to appropriate managers and ensure timely follow‑up.
  • Monitor incident trends, prepare reports, and support corrective action planning.
• HIPAA Privacy Official
  • Serve as the HIPAA Privacy Official for the Health Center.
  • Investigate privacy complaints, potential breaches, and unauthorized disclosures.
  • Ensure documentation of investigations and compliance with breach notification requirements.
  • Oversee Business Associate Agreement (BAA) process in collaboration with contracting staff.
• Regulatory Readiness & Audit Support
  • Coordinate regulatory audit readiness (e.g., HRSA OSV, DPH, CMS, OCR).
  • Prepare required documentation and ensure departments are aware of compliance responsibilities.
  • Assist in maintaining HRSA‑required documents (e.g., Form 5A/B/C updates).
  • Serve as a resource to departments during audits and regulatory reviews.
  • Maintain ongoing official communication with the Board of Registration in Medicine and report PCA Annual and Semi‑Annual reports to the GLFHC Board of Directors.
  • Responsible for FTCA and annual FTCA deeming process as well as any FTCA claims from DOJ and requests from Office of General Counsel.
• Organizational Licenses, Certificates & Accreditation Documents
  • Track organizational licenses and certificates, notifying departments of upcoming expirations.
  • Maintain current and archived regulatory documents for reference and audits.
  • Ensure accreditation‑related documents are available to leadership.
• Education & Training
  • Partner with Human Resources to support compliance and privacy training for new hires.
  • Ensure ongoing staff compliance education, including annual refreshers.
  • Support department managers in delivering area‑specific compliance training.
• Compliance Investigation & Issue Resolution
  • Conduct or coordinate investigations of compliance concerns.
  • Document findings and support implementation of corrective action plans.
  • Identify potential areas of risk and collaborate with…