Director of Risk Management

Sheppard Pratt; Towson (MD); On-site; USD 106,456 - 175,420; Full time

Benefits offered by this job

Tuition reimbursement

Medical, dental and vision benefits

403b retirement match

Generous paid time off

Employee Assistance Program (EAP)

Mileage reimbursement

Job summary

Sheppard Pratt seeks a Director of Risk Management to lead the organization’s risk program, overseeing risk identification, assessment, monitoring, and mitigation affecting patients, staff, visitors, property, and operations.

This role supports litigation and claims management, regulatory readiness, and ERM platform administration, collaborating with leaders, committees, and external stakeholders to advance risk reduction and resilience.

Qualifications

• Bachelor’s degree in Business, Legal, Finance, Accounting, Risk Management or similar field required. Juris Doctorate highly preferred.
• Minimum of 5 years’ experience in risk management; healthcare experience preferred.
• Comprehensive knowledge of healthcare risk management principles, ERM, claims administration, loss prevention, patient safety, accreditation standards, HIPAA, and regulatory obligations.
• Knowledge of litigation support, discovery procedures, and contract review in healthcare settings.
• Ability to investigate incidents, analyze data, identify risks, and recommend practical mitigations.
• Strong analytical, organizational, and project management skills with attention to detail.
• Excellent written and verbal communication; ability to present to executives and stakeholders.
• Proficiency in risk management software, ERM platforms, and MS Office.

Responsibilities

• Direct and administer the organization's risk management program across patients, staff, visitors, property, and operations.
• Maintain risk policies, procedures, and assessment tools; ensure regulatory and accreditation readiness.
• Investigate incidents, preserve evidence, analyze risk data, and develop corrective actions.
• Support RCA and patient safety initiatives; assist with accreditation and performance improvement activities.
• Review vendor agreements to identify and manage risk exposures.
• Support litigation and claims management activities; assist with discovery and external counsel coordination.
• Facilitate Risk Management Committee activities and present risk trends to leadership.
• Administer the ERM platform and report on enterprise risk objectives and initiatives.
• Develop and deliver risk education and training for providers and staff; prepare executive reports.

Skills

Healthcare risk management knowledge

Enterprise risk management

Claims administration

Patient safety practices

HIPAA compliance

Regulatory knowledge

Risk reporting

Education

Bachelor's degree in Business, Legal, Finance, Accounting, Risk Management or similar field

Juris Doctorate

Tools

Risk management software

ERM platforms

Microsoft Office

Reporting tools

Job description

What to expect

The Director of Risk Management is responsible for leading and coordinating the organization's risk management program, ensuring the identification, assessment, monitoring, and mitigation of risks affecting patients, employees, visitors, property, and organizational operations. This position oversees risk management processes, supports litigation and claims management activities, facilitates regulatory and accreditation readiness, administers the Enterprise Risk Management (ERM) platform, provides risk‑related education and reporting, and serves as a key resource to the General Counsel on legal and compliance‑related matters. The Director collaborates with operational leaders, committees, and external stakeholders to promote a proactive approach to risk reduction and organizational resilience.

Responsibilities

• Direct and administer the organization's risk management program, including the identification, assessment, documentation, monitoring, and mitigation of risks affecting patients, employees, visitors, property, and organizational operations.
• Maintain risk management policies, procedures, and risk assessment tools, including the Risk Matrix, ensuring compliance with regulatory, accreditation, and organizational requirements.
• Conduct investigations of incidents, claims, and adverse events; preserve evidence and witness statements; analyze risk data and trends; and collaborate with operational leaders to develop and implement corrective actions, peer review activities, and risk mitigation strategies.
• Support Root Cause Analyses (RCA), patient safety initiatives, accreditation readiness efforts, regulatory surveys, and performance improvement activities designed to reduce organizational risk and improve outcomes.
• Review and evaluate vendor agreements and contracts to identify, minimize, and appropriately manage organizational risk exposures.
• Support litigation and claims management activities by preparing employees subpoenaed as witnesses, maintaining legally appropriate claim files, assisting with discovery requests, and reviewing external counsel pleadings, motions, and other legal documents for accuracy, professionalism, and consistency with organizational interests.
• Facilitate Risk Management Committee activities, including meeting coordination, monitoring higher‑risk events, presenting risk‑related data and trends, evaluating root causes, and developing recommendations to reduce recurring risks and improve organizational performance.
• Administer and maintain the Enterprise Risk Management (ERM) platform, including documenting organizational risk priorities, monitoring action plans, tracking mitigation efforts, and reporting on key enterprise risk objectives and initiatives.
• Develop and deliver risk management education and training programs for providers, nursing staff, and other stakeholders, and prepare periodic reports and presentations for executive leadership and the Board regarding high‑risk events, claims activity, risk trends, and ongoing litigation matters.
• Provide support to the General Counsel by responding to legal inquiries, conducting legal and regulatory research, reviewing and editing contracts, representing organizational interests in guardianship proceedings, and assisting with other legal, compliance, and risk‑related matters as assigned.

What you’ll get from us

• A commitment to professional development, including a comprehensive tuition reimbursement program to support ongoing education and licensure and/or certification preparation.
• Comprehensive medical, dental and vision benefits for benefit‑eligible positions.
• 403b retirement match.
• Generous paid‑time‑off for benefit‑eligible positions.
• Complimentary Employee Assistance Program (EAP).
• Generous mileage reimbursement program.

This position has a pay range of $106,455.86 to $175,419.71 USD.

What we need from you

• Bachelor’s degree in Business, Legal, Finance, Accounting, Risk Management or similar field required. Juris Doctorate highly preferred.
• Minimum of 5 years’ experience in risk management is required. Experience in health care industry is preferred.
• Comprehensive knowledge of healthcare risk management principles, enterprise risk management methodologies, claims administration, loss prevention strategies, patient safety practices, accreditation standards, HIPAA requirements, and applicable regulatory obligations.
• Knowledge of litigation support processes, legal documentation, discovery procedures, evidence preservation requirements, contract review practices, and healthcare‑related legal and compliance considerations.
• Demonstrated ability to investigate complex incidents, analyze data and trends, assess organizational risk exposures, identify root causes, and develop practical recommendations to reduce risk and improve operational performance.
• Strong analytical, problem‑solving, organizational, and project management skills, with the ability to manage multiple priorities, deadlines, and sensitive matters while maintaining accuracy and attention to detail.
• Excellent written, verbal, presentation, and interpersonal communication skills, including the ability to prepare reports, policies, educational materials, and executive‑level presentations and effectively interact with internal and external stakeholders.
• Proficiency in risk management software, Enterprise Risk Management (ERM) platforms, Microsoft Office applications, and reporting tools, with the ability to maintain confidential information and exercise sound independent judgment in sensitive situations.