Privacy & HIPAA Compliance Lead (DMEPOS)

MCRA, an IQVIA business; BLOOMINGTON (MN); On-site; USD 90,000 - 130,000; Full time

Job summary

MCRA, an IQVIA business, partners with an emerging MedTech startup to hire a Compliance Specialist who will oversee HIPAA privacy and security governance, DMEPOS compliance, and information security policy. This role acts as Privacy Officer and Security Officer of record, coordinating with external vendors and CHAP accreditation readiness.

You will build and maintain frameworks, lead risk assessments, and manage the compliance platform while collaborating with leadership to align regulatory

Qualifications

• 2+ years in healthcare compliance, DMEPOS, or health information privacy.
• Bachelor's degree or higher in healthcare administration, business, or a related field.
• Working knowledge of Medicare DMEPOS billing rules, CMS coverage policy.
• HIPAA Privacy and Security Rule expertise, including Privacy Officer or equivalent.
• Experience drafting and owning compliance policies, procedures, and training programs.
• Familiarity with HCP interaction compliance and anti-kickback principles.
• Strong organizational, documentation, and project coordination skills.
• Ability to work independently in a small-company environment.

Responsibilities

• Own and maintain the DMEPOS compliance program across licensing and billing.
• Monitor CMS, OIG, and MAC guidance and translate to procedures.
• Lead CHAP accreditation obligations and renewal readiness.
• Coordinate multi-state DME licensing, registrations, and renewals.
• Develop and deliver compliance training for operations teams.
• Lead internal compliance audits and remediation documentation.
• Maintain policies for interactions with healthcare professionals and entities.
• Oversee the compliance technology platform and vendor due diligence.
• Collaborate with leadership on risk, priorities, and governance.
• Prepare compliance reports for internal and external stakeholders.

Skills

Strong organizational skills

Excellent written and verbal comms

Education

Bachelor's degree or higher in healthcare administration, business, or related field

Tools

Vanta

Drata

Secureframe

Job description

MCRA, an IQVIA business, partners with an emerging MedTech startup to hire a Compliance Specialist who will oversee HIPAA privacy and security governance, DMEPOS compliance, and information security policy. This role acts as Privacy Officer and Security Officer of record, coordinating with external vendors and CHAP accreditation readiness.

You will build and maintain frameworks, lead risk assessments, and manage the compliance platform while collaborating with leadership to align regulatory