Remote Director of Compliance & Privacy Leadership

Gravie; Minneapolis (MN); On-site; USD 150,000 - 230,000; Full time

Benefits offered by this job

Alternative medicine coverage

Flexible PTO

Up to 16 weeks paid parental leave

Paid holidays

401k program

Transportation perks

Education reimbursement

2 days of paid paw-ternity leave

Job summary

Gravie in Minneapolis, MN is seeking a Director of Corporate Compliance and Privacy to champion healthcare compliance and privacy programs across the organization. You will build and mentor two managers and guide a team of professionals while partnering with clinical, operational, technology, and business leaders to protect members’ data and Gravie’s reputation.

The role requires designing a risk-based, enterprise-wide program, overseeing HIPAA privacy, incident response, vendor reviews, rights

Qualifications

• Bachelor's degree in business or a related field
• 10+ years of professional experience in healthcare compliance, privacy, legal, risk, audit, or related field
• 5+ years leading and coaching teams, including managers who lead junior staff
• 5+ years building cross-functional partnerships and influencing senior stakeholders, including explaining complex topics to non-experts
• Project management experience leading complex cross-functional initiatives
• Strong judgment and decisiveness under uncertainty and time pressure
• Working knowledge of healthcare regulatory requirements including ERISA, ACA, No Surprises Act, price transparency, MHPAEA
• Working knowledge of health privacy and security requirements including HIPAA/HITECH as they apply to business associates, breach notification rules, and state privacy laws
• Experience conducting investigations and performing root cause analysis

Responsibilities

• Design, implement, and continuously improve the compliance program in line with federal guidance
• Assess emerging healthcare regulatory and privacy risks and translate them into risk-based controls
• Report regularly to executive leadership and the Board on program effectiveness, risks, and trends
• Oversee the privacy program including HIPAA Privacy Rule compliance, state privacy laws, and privacy notices
• Direct privacy incident and breach response with risk assessments and required notifications
• Oversee privacy reviews of products, systems, vendors, and data uses including privacy impact assessments
• Oversee health plan member rights requests handling per HIPAA and state law
• Serve as a point of contact for privacy regulators and align privacy with security controls
• Lead, develop, and coach the Compliance Manager and Privacy Manager
• Plan for resourcing and long-term capability of the function for distributed/remote teams
• Embed compliance and privacy considerations early into business processes
• Influence stakeholders at all levels without relying solely on formal authority
• Operate the enterprise risk-based auditing and monitoring program
• Oversee hotline/case management, corrective action tracking, and reporting
• Establish SLAs and develop dashboards for leadership visibility
• Present program results to Compliance Committee quarterly
• Manage relationships with regulators and external counsel
• Plan and deliver multiple cross-functional compliance/privacy initiatives on time and within scope
• Set milestones, ownership, and status reporting for projects
• Apply project management practices to coordinate a distributed team
• Identify and assess compliance/privacy risks for the enterprise risk register
• Translate risk analysis into recommendations for leadership
• Make timely, well-reasoned decisions in ambiguous situations

Skills

Leadership

Cross-functional collaboration

Regulatory knowledge

Project management

Judgment and decisiveness

Investigation/root cause analysis

Education

Bachelor's degree in business or related field

MBA/JD or advanced degree (Preferred)

Job description

Gravie in Minneapolis, MN is seeking a Director of Corporate Compliance and Privacy to champion healthcare compliance and privacy programs across the organization. You will build and mentor two managers and guide a team of professionals while partnering with clinical, operational, technology, and business leaders to protect members’ data and Gravie’s reputation.

The role requires designing a risk-based, enterprise-wide program, overseeing HIPAA privacy, incident response, vendor reviews, rights