Compliance and Privacy Specialist

Joint Commission on Accreditation of Healthcare Organizations; Oakbrook Terrace (IL); Hybrid; USD 71,000 - 91,000; Full time

Job summary

Joint Commission on Accreditation of Healthcare Organizations is seeking a Compliance and Privacy Specialist to lead ongoing program implementation, training, audits, and policy maintenance. The role emphasizes HIPAA/privacy, governance, and cross-functional collaboration across Legal, IT Security, and HR.

The position supports data protection efforts, privacy impact analyses, and annual risk prioritization, with an emphasis on accuracy, discretion, and confidentiality in all tasks.

Qualifications

• Bachelor’s degree in records management, project management, business, healthcare, or related field required; master’s degree preferred.
• Three to five years of experience supporting healthcare compliance, privacy, audit, risk, or related operations.
• Experience coordinating compliance-related projects preferred.
• Compliance or privacy certification preferred.

Responsibilities

• Supports compliance training and communication activities, including HIPAA, privacy, security, and new-hire orientation modules.
• Coordinates compliance program administration: schedules Compliance Council meetings, prepares agendas, materials and records.
• Supports monitoring, auditing, and issue resolution: assists with routine monitoring and audits; helps prepare responses to findings.
• Maintains compliance policies and records: updates policies, version control, SharePoint portals and audit-ready documentation.
• Supports privacy program activities: data mapping, privacy impact analyses, and education; assists with risk prioritization and mitigation.

Skills

Written communication

Verbal communication

Analytical skills

Problem-solving

Organization

Project coordination

Education

Bachelor's degree in records management / related field

Master's degree preferred

Tools

Microsoft Office

Spreadsheets

Databases

SharePoint

Document management tools

Job description

Summary Statement

Reporting to Corporate Compliance & Privacy Officer, the Compliance and Privacy Specialist manages the ongoing compliance program implementation and execution, which includes but is not limited to compliance and privacy policies, managing Council meetings, development and participation in training and education, audits and monitors, tracking action items for findings through completion and assists with other compliance program activities. The Compliance and Privacy Specialist contributes to the success of the Enterprise Compliance Program by modeling and promoting compliance with our Code of Conduct, promoting ethical behavior, facilitating proper decision-making, and providing staff with the tools and resources to do what is right in any context.

Position Accountabilities

• Supports compliance training and communication activities: Assists in developing and delivering compliance training programs, including HIPAA, privacy, security, and new-hire orientation modules. Prepares and distributes compliance and privacy communications, including newsletters, intranet updates, website content, and awareness materials. Collaborates with Communications, Marketing, Council members, and business partners to strengthen compliance awareness.
• Coordinates compliance program administration: Supports scheduling and logistics for Compliance Council meetings; prepares agendas, materials, and meeting records. Assists with the annual compliance work plan and tracks milestones, findings, corrective actions, and completion status. Maintains compliance databases, scorecards, documentation tools, training records, and supporting reports.
• Supports monitoring, auditing, and issue resolution: Performs routine compliance monitoring and assists with internal and third-party audits under the guidance of the Corporate Compliance & Privacy Officer. Collects documentation, coordinates interviews, researches compliance matters, and helps prepare responses to findings. Supports the compliance line, hotline coverage, and compliance reviews as assigned.
• Maintains compliance policies and records: Assists with policy and procedure reviews, updates, drafting, and version control. Maintains SharePoint portal content and compliance document libraries. Updates the annual compliance playbook and maintains GDPR and HIPAA audit-ready documentation.
• Supports privacy program activities: Assists with data mapping, privacy impact analyses, privacy education, and awareness messaging. Helps identify privacy issues, document corrective actions, and maintain privacy-related records. Works with the Corporate Compliance & Privacy Officer and Enterprise Director, Information Security, to support data protection efforts. Participates in the annual compliance risk-prioritization process and supports identified mitigation activities. Maintains current knowledge of compliance and privacy requirements through training, relevant literature, and committee participation. Recommends quality and process improvements that strengthen the efficiency and effectiveness of the compliance program.

Position Requirements

• Knowledge, Skills, Abilities (Note: minimum requirements) Bachelor’s degree in records management, project management, business, healthcare, or a related field required; master’s degree preferred.
• Three to five years of experience supporting healthcare compliance, privacy, audit, risk, or related business operations.
• Experience coordinating compliance-related projects preferred.
• Compliance or privacy certification preferred.
• Excellent written, verbal, analytical, problem-solving, organizational, and project-coordination skills.
• Proficiency with Microsoft Office applications, spreadsheets, databases, SharePoint, and document-management tools.
• High level of integrity, discretion, accuracy, and confidentiality.

Position Competencies

• Communication - Clear written and verbal communication; training and presentation support.
• Contributing to Team Success - Cross-functional collaboration with Legal, Information Security, Human Resources, and business partners.
• Decision Making - Sound judgment, confidentiality, issue escalation, and evidence-based recommendations.
• Initiating Action - Proactive follow-through on compliance tasks, corrective actions, and program commitments.
• Managing Work (incl. Time Management) - Project coordination, prioritization, recordkeeping, deadline management, and attention to detail.
• Quality Orientation - Accurate documentation, monitoring, version control, and continuous process improvement.
• Work Standards - Integrity, discretion, accountability, consistency, and adherence to established requirements.
• Technical/Professional Knowledge/Skills - Healthcare compliance and privacy practices; HIPAA; auditing and monitoring; policy administration; SharePoint and Microsoft Office.

This is a hybrid position requiring a minimum of two days per week in our Oakbrook Terrace corporate office.

Joint Commission offers a comprehensive benefits package. For an overview of our benefits package, please visit our Joint Commission Career Page

MIN $71,000.00 MAX $90,500.00

We are an Equal Opportunity Employer. All qualified applicants will receive consideration without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other status protected by law.

About Us Discover our values, initiatives, partners and more. Why Choose Us We provide tools for ongoing performance improvement initiatives Key Initiatives Discover our priorities and how we advance health care. Our Team Experts collaborate globally to enhance safety practices.