Director Risk and Compliance

Livework; Los Angeles (CA); Hybrid; USD 135,000 - 165,000; Full time

Job summary

LiveWork is partnering with a Federally Qualified Health Center to appoint a Director of Risk & Compliance – Healthcare. This senior role leads regulatory and risk management across multiple locations and partners with the COO/Compliance Officer to ensure HIPAA privacy, HRSA program alignment, and robust internal controls.

The position requires strategic oversight with hands-on execution, preparing for the 2027 HRSA Operational Site Visit and strengthening organizational accountability while

Qualifications

• Bachelor's degree or equivalent professional experience.
• 5+ years in healthcare compliance, risk management, or regulatory affairs.
• 2+ years leading a compliance team.
• Strong HIPAA, HRSA, and CA healthcare regulation knowledge.
• Experience implementing and managing healthcare compliance programs.
• Experience conducting investigations and coordinating corrective actions.
• Ability to work in a hybrid environment in Los Angeles and travel.

Responsibilities

• Develop and maintain a comprehensive healthcare compliance program.
• Lead HRSA compliance preparation and site visits.
• Coordinate internal assessments, audits, and corrective actions.
• Advise executive leadership on compliance risks and strategies.
• Oversee HIPAA privacy compliance with Privacy Officer.
• Manage privacy incident investigations and breach notifications.
• Collaborate with IT and security on privacy and risk.
• Lead credentialing and policy management improvements.
• Prepare compliance reports for the Board.
• Promote a culture of ethics and non-retaliation.

Skills

Healthcare regulatory knowledge

Leadership

Regulatory investigations

Communication

Problem-solving

Travel readiness

Education

Bachelor's degree in Healthcare Administration, Public Health, Business Administration, or related field

Tools

Microsoft Office

Policy management software

Incident reporting systems

Job description

Director of Risk & Compliance – Healthcare

Company: Confidential Client

Position Type: Full-Time

Reports To: Chief Operating Officer (COO) / Compliance Officer

Compensation: $135,000 - $165,00

About the Role

LiveWork has partnered with a Federally Qualified Health Center (FQHC) seeking an experienced, strategic, and hands‑on Director of Risk & Compliance to lead the organization's compliance and risk management functions across multiple health center locations.

Working closely with the Chief Operating Officer, who serves as the organization's Compliance Officer and HIPAA Privacy Officer, this position will play a critical leadership role in ensuring regulatory compliance, organizational risk mitigation, patient privacy, and operational accountability.

The ideal candidate brings extensive healthcare regulatory knowledge, strong experience with HRSA requirements, HIPAA compliance, credentialing, and risk management, along with the ability to lead investigations, coordinate audits, and advise executive leadership.

A significant priority for this position will be leading the organization's preparation for its 2027 HRSA Operational Site Visit, including compliance readiness, documentation, internal assessments, and coordination of the audit process.

This is an opportunity for an accomplished healthcare compliance professional who can balance strategic oversight with hands‑on execution while strengthening organizational accountability and supporting the delivery of high‑quality community healthcare services.

Key Responsibilities

Compliance Strategy & Organizational Leadership

• Develop, implement, and maintain a comprehensive healthcare compliance program aligned with organizational objectives and regulatory requirements.
• Partner closely with the COO, executive leadership, and department leaders to promote a culture of compliance, accountability, and ethical conduct.
• Maintain and execute the organization's annual compliance work plan and risk assessment.
• Evaluate existing compliance policies, procedures, and internal controls to identify opportunities for improvement.
• Monitor changes in federal and California healthcare regulations and implement necessary updates.
• Provide compliance guidance and recommendations to organizational leadership across multiple health center locations.

HRSA Compliance & Regulatory Oversight

• Lead organizational preparation and coordination for the upcoming 2027 HRSA Operational Site Visit.
• Ensure ongoing compliance with HRSA Health Center Program requirements, grant conditions, and federal regulatory standards.
• Coordinate internal compliance assessments, documentation reviews, corrective action plans, and audit readiness initiatives.
• Serve as a key point of contact during external regulatory audits, site visits, and compliance inquiries.
• Monitor compliance with applicable federal and California healthcare laws and regulations.
• Collaborate with organizational leadership to address identified compliance gaps and implement sustainable corrective actions.
• Oversee HIPAA privacy compliance policies, procedures, and organizational practices in coordination with the designated Privacy Officer.
• Manage patient privacy concerns, patient rights requests, and potential HIPAA violations.
• Coordinate privacy incident assessments, investigations, breach notification processes, and corrective actions when necessary.
• Collaborate with information security personnel to address privacy and security risks.
• Develop and maintain privacy training programs to promote employee awareness and regulatory compliance.
• Ensure appropriate documentation, confidentiality, and reporting of privacy-related matters.
• Oversee organizational risk management activities across multiple healthcare locations.
• Manage incident reporting processes, patient complaints, grievances, and compliance-related concerns.
• Lead sensitive compliance investigations, ensuring objectivity, confidentiality, and appropriate documentation.
• Identify trends in reported incidents and recommend preventive and corrective measures.
• Coordinate liability matters, insurance claims, and risk-related concerns with outside legal counsel and insurers.
• Oversee Federal Tort Claims Act (FTCA) compliance activities, related filings, and risk management requirements.
• Promote consistent application of organizational policies and non-retaliation practices.

Credentialing, Policy Management & Compliance Training

• Oversee provider credentialing and re‑credentialing processes to ensure regulatory and organizational compliance.
• Partner with the Chief Medical Officer and clinical leadership to maintain appropriate credentialing standards.
• Maintain the organization's policy and procedure library, including scheduled reviews, approvals, and regulatory updates.
• Develop and manage compliance education and training programs for new hires and existing employees.
• Coordinate annual compliance training and targeted educational initiatives based on organizational risks.
• Conduct monthly exclusion screenings of employees, contractors, and vendors against applicable OIG and SAM databases.
• Evaluate compliance systems and reporting tools to improve operational efficiency and documentation accuracy.

Compliance Reporting & Executive Collaboration

• Prepare and present compliance reports, risk assessments, and audit findings to executive leadership and the Board's Audit Committee.
• Establish compliance monitoring processes and performance measures to evaluate organizational effectiveness.
• Communicate significant compliance risks, investigation findings, and corrective action recommendations.
• Coordinate responses to external auditors, regulatory agencies, and other oversight organizations.
• Maintain accurate records of compliance activities, investigations, training, and corrective actions.
• Provide leadership with actionable recommendations to strengthen regulatory compliance and reduce organizational exposure.

Required Qualifications

• Bachelor's degree in Healthcare Administration, Public Health, Business Administration, or a related field, or equivalent relevant professional experience.
• 5+ years of progressive experience in healthcare compliance, risk management, or regulatory affairs.
• At least 2 years of experience leading a compliance team, function, or program.
• Strong working knowledge of HIPAA, HRSA Health Center Program requirements, and California healthcare regulations.
• Demonstrated experience implementing and managing healthcare compliance programs.
• Experience conducting compliance investigations, documenting findings, and coordinating corrective actions.
• Knowledge of provider credentialing, incident management, and organizational risk management practices.
• Ability to interpret healthcare regulations and translate requirements into operational policies and procedures.
• Experience preparing compliance reports and presenting findings to executive leadership.
• Proficiency with Microsoft Office and standard business reporting tools.
• Exceptional communication, organizational, analytical, and problem‑solving skills.
• Ability to work in a hybrid environment in Los Angeles and travel regularly to health center locations.

Preferred Qualifications

• Certified in Healthcare Compliance (CHC), Certified in Healthcare Privacy Compliance (CHPC), or a comparable compliance certification, or willingness to obtain certification within the first year.
• Prior compliance or risk management leadership experience within a Federally Qualified Health Center (FQHC), community health center, or safety‑net healthcare organization.
• Experience preparing for and coordinating HRSA Operational Site Visits.
• Familiarity with Federal Tort Claims Act (FTCA) requirements and healthcare liability management.
• Experience overseeing compliance activities across multiple healthcare facilities.
• Proficiency with compliance management, incident reporting, or policy management software.
• Bilingual proficiency in English and Spanish.
• Experience collaborating directly with executive leadership, legal counsel, regulatory agencies, and governing boards.

What Success Looks Like

• Successful organizational preparation and coordination for the 2027 HRSA Operational Site Visit.
• A proactive compliance program that supports organizational goals and regulatory requirements.
• Strong HIPAA privacy practices and consistent adherence to healthcare regulations.
• Effective incident management, compliance investigations, and corrective action processes.
• Timely and accurate provider credentialing and re‑credentialing.
• Comprehensive compliance training and consistent application of organizational policies.
• Improved organizational risk identification, mitigation, and regulatory readiness.
• Accurate and timely compliance reporting to executive leadership and the Board.
• A trusted compliance partnership with the COO and department leadership.

Why Join?

• Executive-Level Impact: Partner directly with executive leadership and help shape the organization's compliance and risk management strategy.
• Meaningful Mission: Support a community healthcare organization dedicated to providing accessible, high-quality care to underserved populations.
• Organizational Leadership: Lead critical compliance and risk management initiatives across multiple health center locations.
• High-Impact Opportunity: Take ownership of the organization's preparation for its 2027 HRSA Operational Site Visit and play a central role in ensuring regulatory readiness.
• Strategic Ownership: Drive improvements in compliance operations, patient privacy, credentialing, investigations, and organizational risk management.
• Professional Growth: Strengthen organizational compliance infrastructure while serving as a trusted advisor to senior leadership.

Apply Today

If you are an accomplished healthcare compliance leader with strong knowledge of HRSA requirements, HIPAA regulations, healthcare risk management, and a passion for supporting community healthcare organizations, we encourage you to apply.