Compliance and Risk Officer

Providence Community Health Summary

The Compliance and Risk Officer serves as the organization's designated leader for compliance, risk management, HIPAA privacy, patient safety, regulatory oversight, investigations, and ethics. This position is an enterprise-wide leadership role accountable for maintaining an effective culture of compliance, privacy, safety, and risk reduction throughout the organization.

The Compliance and Risk Officer is responsible for the development, implementation, oversight, and continuous improvement of Providence Community Health Centers' Corporate Compliance Program, Enterprise Risk Management Program, Patient Safety Program, and Health Insurance Portability and Accountability Act (HIPAA) Privacy Program. The Compliance and Risk Officer serves as the organization's designated Compliance Officer and HIPAA Privacy Officer and provides support in identifying, assessing, mitigating, and monitoring organizational risk while ensuring compliance with applicable federal and state laws, regulations, contractual requirements, and organizational policies.

The Compliance and Risk Officer serves as a strategic advisor to executive leadership, leads the Corporate Compliance Committee, and Risk Management Committee, and presents to the Board of Directors regarding compliance, ethics, privacy, patient safety, and enterprise risk management. The position works closely with leadership, providers, staff, legal counsel, corporate insurance agents, regulators, auditors, payors, and other external agencies to promote a culture of compliance, accountability, safety, and continuous improvement.

• Serve as the organization's Compliance Officer and oversee the Corporate Compliance Program.
• Develop, implement, and maintain compliance policies, procedures, training, monitoring, and auditing activities to promote adherence to legal, regulatory, and organizational requirements.
• Conduct compliance risk assessments, develop mitigation strategies, and prepare annual compliance work plans.
• Monitor compliance with applicable federal and state healthcare laws and regulations, including HIPAA/HITECH, Stark Law, Anti-Kickback Statute, False Claims Act, Medicare, Medicaid, and FTCA requirements.
• Oversee compliance investigations, audits, hotline activities, corrective action plans, and reporting processes.
• Promote reporting of compliance concerns and ensure timely investigation, resolution, and regulatory reporting when required.
• Chair the Corporate Compliance Committee and provide regular reports to executive leadership and the Board of Directors.
• Collaborate with Human Resources and operational departments to support exclusion screening and other compliance requirements.

• Serve as the organization's HIPAA Privacy Officer and oversee the Privacy Program.
• Develop and maintain privacy policies, safeguards, training, and compliance monitoring activities to protect PHI and ePHI.
• Conduct privacy risk assessments and compliance reviews.
• Investigate privacy complaints, breaches, and unauthorized disclosures, and coordinate required notifications and reporting.
• Oversee privacy-related Business Associate Agreement requirements and provide guidance regarding patient privacy rights, confidentiality, and release of information practices.
• Partner with Human Resources, Health Information Management, Information Technology, and operational leaders to ensure privacy compliance and appropriate corrective actions.

• Serve as the organization's Risk Officer and oversee the Enterprise Risk Management and Patient Safety Programs.
• Develop and maintain risk management policies, procedures, training, and monitoring activities designed to identify and mitigate organizational risk.
• Review, investigate, and trend incident reports, patient complaints, adverse events, near misses, and patient safety concerns.
• Conduct investigations, prepare reports, and recommend corrective actions to address operational, clinical, regulatory, and liability risks.
• Identify systemic issues and emerging risks and develop mitigation strategies to reduce…