Compliance Analyst

Health Gorilla; United States; Remote; USD 95,000 - 120,000; Full time

Benefits offered by this job

Competitive salary: $95,000–$120,000

Job summary

Health Gorilla is seeking a Compliance Analyst to support TEFCA, HIPAA, and information blocking compliance across its interoperability platforms. You will collaborate with Legal, Security, Product, Engineering, and Operations to ensure regulatory alignment and governance.

The role emphasizes monitoring, investigations, audits, and policy development to sustain regulatory excellence and data governance in a national health information exchange environment.

Qualifications

• Bachelor's degree in healthcare fields or related discipline.
• 5+ years of experience in healthcare compliance or regulatory functions.
• Knowledge of HIPAA, TEFCA, and Information Blocking requirements.
• Experience performing compliance monitoring, audits, investigations, or risk assessments.

Responsibilities

• Monitor compliance, identify risks, document findings, and track remediation.
• Review system activity, access logs, data exchange activity, and workflows for compliance concerns.
• Assist investigations involving privacy, TEFCA, participant compliance, or data-use concerns.

Skills

Healthcare compliance

Regulatory knowledge

Data analysis

Documentation

AI in compliance

Education

Bachelor's degree in healthcare fields

Tools

Databricks

SQL

Snowflake

Azure Data Explorer

Job description

Compliance Analyst

Location: Remote (U.S.)

Want to help build the future of healthcare compliance?

Health Gorilla is a national interoperability and health information exchange company dedicated to improving healthcare through secure, standards-based data sharing. As a designated Qualified Health Information Network (QHIN) under TEFCA, Health Gorilla connects healthcare organizations, technology partners, and patients through a trusted network that enables seamless exchange of health information nationwide.

The Compliance Analyst supports Health Gorilla's compliance program by helping ensure adherence to TEFCA, HIPAA, information blocking regulations, data governance requirements, and other federal and state healthcare regulations. The role works closely with Legal, Security, Product, Engineering, Operations, and Data teams to monitor compliance, conduct investigations, support audits, and identify compliance risks across Health Gorilla's interoperability platforms. If you are a compliance professional who is passionate about healthcare interoperability, data governance, emerging technologies, and regulatory compliance, this role is for you!

What you will do at Health Gorilla

Compliance Monitoring & Investigations

• Conduct compliance monitoring activities to identify potential risks, anomalies, or policy violations.
• Review system activity, access logs, data exchange activity, and operational workflows for compliance concerns.
• Assist with investigations involving privacy, security, TEFCA, participant compliance, or data-use concerns.
• Document findings, recommend corrective actions, and track remediation efforts.

Data Analytics & Compliance Reporting

• Utilize Databricks, SQL, or similar analytical platforms to support compliance reviews, audits, and investigations.
• Develop and execute queries or leverage modern tools to analyze data exchange activity, access patterns, user behavior, and operational metrics.
• Leverage AI where appropriate to prepare reports and dashboards that support compliance monitoring and risk management activities.
• Partner with Engineering and Data teams to improve automated compliance monitoring capabilities and optimize the use of AI tools.

Regulatory Compliance & TEFCA Oversight

• Support ongoing compliance with TEFCA, the Common Agreement, and QHIN operational requirements.
• Monitor changes in healthcare regulations, interoperability requirements, and industry guidance.
• Assist with regulatory audits, assessments, and external reviews.
• Participate in compliance reviews for new products, services, partnerships, and business initiatives.

Policy Development & Training

• Assist in developing and maintaining compliance policies, procedures, and standards.
• Support compliance training and awareness programs for employees and business partners.
• Help maintain compliance documentation and evidence repositories.

Cross-Functional Collaboration

• Work closely with Legal, Security, Privacy, Product, Engineering, and Operations teams.
• Provide practical compliance guidance to business stakeholders.
• Foster a culture of integrity, accountability, and regulatory excellence.

What you bring to the role

• Bachelor's degree in Healthcare Administration, Health Informatics, Public Health, Business, Information Systems, Law, or related field.
• Minimum 5 years of experience in healthcare compliance, healthcare operations, health information exchange, health IT, healthcare privacy, or related regulatory functions.
• Working knowledge of HIPAA and other privacy laws, TEFCA and interoperability frameworks, 21st Century Cures Act and Information Blocking requirements, and healthcare privacy and security principles.
• Experience performing compliance monitoring, audits, investigations, or risk assessments.
• Strong analytical, organizational, process-driven, and documentation skills.
• Excellent written, presentation, and verbal communication skills.
• Experience reviewing healthcare technical specifications.
• Experience leveraging AI-powered tools to enhance compliance workflows.

Preferred qualifications

• Experience working for a QHIN, HIE, healthcare technology company, EHR vendor, payer, or healthcare data network.
• Experience writing and executing SQL queries.
• Experience using Databricks, Snowflake, Azure Data Explorer, or similar data analytics platforms.
• Experience supporting compliance programs involving healthcare interoperability and data exchange.
• Familiarity with healthcare standards including HL7, FHIR, CDA, and IHE frameworks.
• Professional certifications such as Certified in Healthcare Compliance (CHC), Certified in Healthcare Privacy Compliance (CHPC), Certified Information Privacy Professional (CIPP/US), or Certified Information Systems Auditor (CISA).
• Experience working with regulatory audits and external assessors.

What You Will Love About Us!

• Health Gorilla takes a market-based approach to pay, and the base salary range for this role is $95,000 to $120,000