Risk Partner

highmarkhealth; Pennsylvania; Hybrid; USD 120,000 - 180,000; Full time

Job summary

Highmark Inc. is seeking a senior professional to implement, execute, and maintain the Compliance Program across the enterprise, ensuring adherence to federal and state laws, regulations, and guidance.

The role includes auditing, investigations, training, and collaboration with Risk Operations to drive risk mitigation. You will partner with Legal, Risk Enablement, and business leaders, provide guidance, monitor regulatory changes, and oversee reporting to senior management and the Board.

Qualifications

• Extensive knowledge of federal and state regulations related to healthcare compliance.
• Experience with audit processes and investigations.
• Ability to train teams and enforce policies.
• Strong integrity and ethical standards.

Responsibilities

• Lead and manage the enterprise-wide compliance program.
• Partner with Risk Operations, Legal, and leadership to implement risk controls.
• Oversee audits, investigations, and regulatory reporting.
• Ensure training and awareness across the organization.
• Monitor changes in laws and regulatory guidance.

Skills

Compliance program leadership

HIPAA & privacy knowledge

Risk management

Auditing & investigations

Training & policy enforcement

Job description

Company : Highmark Inc. Job Description

Job Summary

This job is responsible for implementing, executing and maintaining the Compliance Program and its related policies to ensure the businesses act within the parameters of federal and state laws, regulations, and regulatory guidance. The incumbent is also responsible for the administration, interpretation, and enforcement of the Compliance Program including auditing/monitoring operational processes, conducting or overseeing compliance investigations, and ensuring that adequate training takes place under the Compliance Program. In this capacity, the individual is responsible for the collaborative and iterative execution of the risk and compliance plan for these entities across all areas in the enterprise risk taxonomy. Through matrixed leadership with Risk Operations and with support from Risk Enablement, the incumbent monitors and tracks the delivery of risk activities, including but not limited to, internal and external audit progress, recurring risk and compliance reporting, mandated training, investigations, and the impacts of new and changing laws, regulations, and contractual relationships. The incumbent must have extensive knowledge of the applicable federal and state rules as well as a solid working knowledge of managed care operations, compliance program structures, information security and audit methodologies. The incumbent must also have a foundational understanding of privacy regulations, including in-depth knowledge of HIPAA and possess the ability to perform a privacy risk assessment. The incumbent must have the highest level of integrity and ethics and demonstrate professional representation of the company.

Essential Responsibilities

• Provides thought leadership and acts as an advisor to business leaders to ensure business decisions are made in alignment with the enterprise risk strategy / framework. Participates in and understands the business operations and strategy. Serves as a single point of contact for the business' risks, compliance, privacy and security needs, and partners closely with legal counsel on all efforts.


• Works with Risk Operations and the Strategic Risk Partner to implement and maintain an effective compliance and risk management program for the supported entities. This includes, but is not limited to education and training requirements, reporting and intake protocols, monitoring and implementation of new or changing regulatory requirements, risk assessment and audit execution, risk treatment plans, policy and procedure maintenance, response and investigation procedures and compliance expectations.


• Provide proactive guidance, education, and information to senior management, so that business leaders remain informed and aware of risks, requirements, mitigation strategies, and management's responsibilities. Participates in discussions or presentations to existing Compliance or Risk Committees. Gathers data and prepares reports for senior management and Board of Directors as needed. Ensure reporting obligations are met. Participates on various risk committees and may represent their entity when appropriate.


• Informs business entity of risk related activity, ensures awareness and monitors execution. Tracks, monitors and reports on Risk Operations activities for the assigned business entity using the standard metrics and reporting created by Risk Enablement.


• Proactively identifies and addresses risk in partnership with Risk Operations, Legal, and business entity leaders by thoroughly understanding strategy and functional operation of the business entity. Serves as a single point of contact to respond and intake risk from the senior leadership team, and follows protocol to triage.


• Respond to reports of potential or real instances of non-compliance including recommendations for resolution, risk treatment and corrective action plans. Work with legal counsel and Internal Investigations Unit to ensure timely notice or disclosure of incidents or issues as appropriate/required. Ensure all reported matters are addressed in a timely and responsible manner in compliance with corporate policy, state and federal law and best practices.


• Liaise with external regulators or enforcement bodies interacting with the assigned business entity per defined communication and legal protocols. Serve as the single point of contact for regulators.


• Ensure completion of all education and training initiatives and requirements and identify priorities for focus for the accountable entities.


• Participate in the implementation of the enterprise's risk strategy for effective risk and compliance program governance; intended to strategically and proactively mitigate risk, and promptly detect and correct instances of non-compliance. This includes but is not limited to formal risk assessment processes and the implementation of an annual audit plan.


• Maintain a strong working knowledge of the regulatory, security, and privacy landscape.


• Other duties as assigned.