Director of Risk & Compliance

Gracelight; Los Angeles (CA); Hybrid; USD 128,000 - 167,000; Full time

Job summary

Gracelight Community Health seeks a Director of Risk & Compliance to lead the corporate compliance program and risk management across all sites. Regular travel to Gracelight locations is required, reporting to the COO who serves as Compliance Officer and HIPAA Privacy Officer.

The role covers credentialing, auditing, investigations, policy management, and annual training. A Bachelor's degree and 5+ years in healthcare compliance are required; CHC/CHPC is preferred.

Qualifications

• Bachelor’s degree in healthcare administration, public health, business, or related field; equivalent experience may substitute.
• Minimum five years of healthcare compliance or risk management experience, including two years in leadership.
• Certifications in Healthcare Compliance or Privacy preferred; may be obtained within 12 months of hire.
• Working knowledge of HIPAA, HRSA requirements, and federal/state regulations.

Responsibilities

• Operate and improve the corporate compliance program under the designated Compliance Officer.
• Ensure HRSA Health Center Program compliance and support site visits.
• Administer HIPAA privacy program, breach reporting, and patient rights requests.
• Oversee credentialing and privileging per HRSA/FTCA requirements.
• Manage incident reporting, investigations, and corrective actions.
• Prepare compliance and risk reports for executive leadership and Board committees.

Skills

HIPAA

Regulatory compliance

Investigations

Communication

Leadership

Bilingual English/Spanish

Education

Bachelor’s degree in healthcare administration

Tools

Microsoft Office

Policy management systems

Job description

# Director of Risk & ComplianceHot JobCorporate Headquarters - Los Angeles, CA 90017## OverviewSalary Range$128,279.00 - $167,422.00 SalaryPosition TypeFull TimeJob ShiftDayEducation LevelBachelors DegreeTravel PercentageLocal Travel Site to SiteCategoryHealth Care## DescriptionThe Director of Risk and Compliance manages Gracelight Community Health's (\"Gracelight\") corporate compliance and risk management programs across all health center sites and administrative operations, in support of the Chief Operating Officer, who serves as the organization's designated Compliance Officer and HIPAA Privacy Officer. The Director oversees the credentialing and privileging program, ensures ongoing compliance with HRSA Health Center Program requirements and applicable federal and state regulations, and prepares compliance and risk reporting for executive leadership and the Audit Committee of the Board of Directors. This role is based at the administrative office and requires regular travel to Gracelight locations.**ESSENTIAL JOB DUTIES AND RESPONSIBILITIES:*** Operates and continuously improves the corporate compliance program under the direction of the designated Compliance Officer, including written standards, education, monitoring and auditing, reporting channels, investigation and response, and corrective action.* Ensures ongoing compliance with HRSA Health Center Program requirements (Section 330), including support for operational site visits, grant conditions, and required policies.* Administers the HIPAA privacy program in support of the designated HIPAA Privacy Officer; manages privacy policies, breach assessment and reporting, and patient rights requests, and coordinates with the Security Officer function on the HIPAA security program and risk assessments.* Oversees the credentialing and privileging program for licensed and certified personnel, including initial credentialing, recredentialing, privileging, primary source verification, and expirables tracking, in accordance with HRSA and FTCA requirements and in coordination with the Chief Medical Officer for clinical review and approval.* Manages the incident reporting system across all sites; ensures incidents, patient grievances, and complaints are logged, investigated, resolved, and trended, and that findings reach the appropriate leaders.* Conducts and documents internal investigations of compliance concerns; maintains confidential reporting channels and enforces non-retaliation.* Performs monthly OIG/SAM exclusion screening for employees, contractors, and vendors; documents results and remediates findings.* Owns the policy management cycle; maintains the policy library, drives scheduled reviews and approvals, and ensures policies reflect current law and practice.* Manages the annual compliance training calendar, including new hire and annual refresher training and targeted training in response to identified risks.* Coordinates risk management activities, including professional and general liability matters, FTCA deeming and redeeming applications, claims coordination with counsel and insurers, and insurance renewals.* Prepares and presents compliance and risk reports for the Compliance Officer, executive team, and Board Audit Committee, including work plans, audit results, and corrective action status.* Coordinates responses to external audits, surveys, payer reviews, and regulatory inquiries.* Maintains the annual compliance work plan and risk assessment; adjusts priorities based on findings, enforcement trends, and organizational change.* Maintains compliance with all applicable federal, state, and local regulations, HRSA Health Center Program requirements, and Gracelight policies and procedures.* Performs other duties as assigned.## Qualifications* Bachelor’s degree in healthcare administration, public health, business, or a related field; equivalent directly related experience may substitute for the degree.* Minimum of five (5) years of progressive experience in healthcare compliance, risk management, or regulatory affairs, including at least two (2) years in a management or program-leadership role. Experience in a community health center, FQHC, or safety-net setting strongly preferred.* Licensure and certification — Certification in Healthcare Compliance (CHC), Certified in Healthcare Privacy Compliance (CHPC), or similar credential preferred; may be obtained within twelve (12) months of hire.* Working knowledge of HIPAA, HRSA Health Center Program requirements, and federal and California healthcare regulations, including compliance program structure, credentialing and privileging, incident and grievance management, and risk management practices. Proficiency with Microsoft Office; experience with compliance, incident reporting, or policy management systems preferred.* Demonstrated ability to conduct investigations, write clear findings, and present to executive and board audiences. Strong interpersonal and communication skills and demonstrated ability to work with a diverse workforce and patient population. Bilingual English/Spanish preferred.