RUHS Compliance Director - Corporate Compliance

County of Riverside; Riverside (CA); On-site; USD 150,000 - 210,000; Full time

Job summary

The County of Riverside is seeking a Medical Center Compliance Director for the Corporate Compliance department in Riverside, CA. The role leads regulatory compliance and privacy efforts across RUHS services, coordinating investigations, risk assessments, and corrective actions with executive leadership.

Ideal candidates bring healthcare compliance and privacy experience in acute-care settings, with knowledge of state and federal requirements and the ability to report to multiple regulatory

Qualifications

• Experience in healthcare compliance in an acute-care hospital setting.
• Experience investigating patient privacy breaches and conducting risk assessments.
• Ability to coordinate corrective actions and regulatory reporting to agencies.

Responsibilities

• Assist the RUHS Compliance and County Privacy Officer with implementation and evaluation of regulatory compliance and privacy activities across RUHS.
• Provide regulatory guidance regarding confidentiality requirements, reporting, information sharing, and PHI use.
• Direct or coordinate privacy incident investigations, evaluate findings, and coordinate corrective actions.
• Coordinate auditing, monitoring, and risk assessment activities to identify vulnerabilities and recommend corrective actions.
• Develop and review enterprise-wide compliance and privacy policies to promote consistency.
• Collaborate with IT, HIM, Public Health, Legal, HR, Risk Management, and leadership on privacy and compliance initiatives.
• Evaluate privacy considerations for EHRs, health information exchanges, data sharing, BAAs, and third-party access.
• Coordinate corrective action plans from surveys, investigations, audits, and external reviews.
• Prepare responses to regulatory inquiries and deliver education on compliance and privacy to workforce.
• Present regulatory updates and risk assessments to executive leadership and committees.
• Develop and implement policies to ensure regulatory compliance, retain and investigate complaints, and oversee sanctions.
• Monitor changes in federal and state health laws and participate in meetings.

Skills

Healthcare compliance

Privacy compliance

Regulatory investigations

Education

Bachelor's degree in a related field

Master's degree in healthcare administration or related field

California Driver's License

CHPC certificate (within 12 months)

Job description

The County of Riverside - Riverside University Health System is seeking a Medical Center Compliance Director for the Corporate Compliance department located in Riverside, Ca.

The most competitive candidates will have professional experience in healthcare compliance and privacy within an acute-care hospital setting. Preferred experience includes investigating and managing patient privacy breaches, conducting risk assessments, coordinating corrective actions, and preparing and submitting reports or notifications to regulatory agencies, including the California Department of Public Health (CDPH), California Department of Health Care Services (DHCS), U.S. Department of Health and Human Services Office for Civil Rights (OCR), and Office of Inspector General (OIG).

Required

License/Certificate:

• Possession of a valid California Driver's License.
• Certified Healthcare Privacy Compliance (CHPC) certificate must be obtained within 12 months from date of hire.

Work Schedule: 9/80

Under general direction, plans, organizes, coordinates, and directs assigned regulatory compliance, privacy, and health information confidentiality activities throughout Riverside University Health System (RUHS), including RUHS Medical Center, Public Health, Behavioral Health and other designated departments, facilities, clinics, and programs.

The Compliance Director is responsible for coordinating assigned compliance activities, implementing regulatory requirements, monitoring compliance risks, directing investigations, and supporting corrective action initiatives across the applicable RUHS service areas.

The incumbent collaborates with RUHS executive leadership, departmental administrators, the RUHS Compliance and County Privacy Officer, and other appropriate stakeholders to promote organizational compliance with applicable federal and state laws, regulations, and policies.

The Compliance Director supports the implementation of enterprise-wide compliance and privacy initiatives under the direction and oversight of the designated RUHS compliance leadership, consistent with the position's assigned responsibilities and organizational reporting structure.

This class has been deemed eligible for the Performance Recognition Plan as set forth under Article 3, Section 311(C) of the County Management Resolution. Program eligibility requires employees to be in a leadership position, manage other employees or programs, and have significant influence on the achievement of organizational objectives.

Meet the Team!

Every day at Riverside University Health System Medical Center, a dedicated team of healthcare professionals and support staff come together to improve lives across Riverside County. Our nationally recognized programs and specialized services thrive because of the diverse talents and commitment of our team members. No matter your background or skill set, you’ll discover meaningful opportunities and a strong sense of purpose here.

To learn more about RUHS Medical Center, please visit www.ruhealth.org

Responsibilities

• Assist the RUHS Compliance and County Privacy Officer with the implementation, coordination, monitoring, and evaluation of regulatory compliance and privacy activities throughout RUHS, including Medical Center, Public Health, and other designated RUHS departments and programs.
• Provide regulatory compliance and privacy guidance to RUHS Public Health leadership and staff regarding applicable federal and state confidentiality requirements, public health reporting, information sharing, and the appropriate use and disclosure of protected health information and other confidential information.
• Direct or coordinate the investigation of reported or suspected privacy incidents, unauthorized access, impermissible disclosures, and other potential violations of confidentiality requirements; evaluate findings, coordinate corrective actions, and assist with required regulatory notifications.
• Coordinate compliance auditing, monitoring, and risk assessment activities across assigned RUHS departments and programs to identify regulatory vulnerabilities, evaluate adherence to applicable requirements, and recommend corrective actions.
• Assist with the development, implementation, and ongoing review of enterprise-wide compliance and privacy policies, procedures, standards, and operational practices to promote consistency across RUHS departments and service lines.
• Collaborate with RUHS Information Technology, Health Information Management, Public Health, Legal Counsel, Human Resources, Risk Management, and departmental leadership regarding privacy, information security, regulatory compliance, and corrective action initiatives.
• Evaluate privacy and regulatory compliance considerations associated with electronic health records, health information exchanges, data‑sharing agreements, business associate arrangements, third‑party system access, and other activities involving confidential health information.
• Coordinate and monitor corrective action plans resulting from regulatory surveys, compliance investigations, internal audits, external reviews, and identified deficiencies to ensure timely implementation and ongoing effectiveness.
• Assist with preparing and coordinating responses to regulatory inquiries, investigations, audits, and requests for information from applicable oversight agencies, including CDPH, DHCS, CMS, OCR, and other regulatory authorities.
• Develop and deliver compliance and privacy education, training, and guidance to workforce members and departmental leadership throughout assigned RUHS operations.
• Prepare and present compliance reports, investigation summaries, regulatory updates, risk assessments, and recommendations to RUHS executive leadership and designated compliance oversight committees.
• Develop and implement policies, standards, and procedures to ensure regulatory compliance.
• Document, retain, track, investigate, and resolve complaints.
• Disseminate audit findings and oversee appropriate corrective actions and sanctions.
• Provide timely reports to the RUHS‑MC Chief Executive Officer, COO, and executive management, as applicable.
• Directly and through supervisory staff, select, assign, and direct subordinate employees, where applicable.
• Coordinate regulatory surveys, including Joint Commission, state licensing, and CMS validation surveys.
• Advise department managers on interpreting and enforcing applicable policies and regulations.
• Manage the RUHS‑MC HIPAA compliance hotline, if that responsibility remains assigned to this position.
• Monitor changes in federal and state healthcare laws and regulations.
• Attend and conduct staff, committee, and professional meetings.

OPTION I

Education: Graduation from an accredited college or university with a bachelor's degree, preferably with a major in nursing, nursing administration, business, healthcare, public health administration, or a closely related field to the assignment. (A master's degree from an accredited college or university in healthcare, hospital or nursing administration, or a closely related field to the assignment is preferred.)

Experience: Three years of regulatory compliance administration in the field of healthcare, which must have included two years of management experience directing an organization's compliance program. (Possession of a master's degree from an accredited college or university in nursing, hospital or healthcare administration, or a closely related field to the assignment may substitute for one year of the required non‑management experience.)

OPTION II

Education: Graduation from an accredited college or university with a bachelor's degree, preferably with a major in nursing, nursing administration, business, healthcare, public health administration, or a closely related field to the assignment. (A master's degree from an accredited college or university in healthcare, hospital or nursing administration, or a closely related field to the assignment is preferred.)

Experience: Five years in an administrative capacity in the field of healthcare, which included responsibility for the development and implementation of compliance programs related to privacy and management of patient health information and compliance to regulations and standards of accrediting/regulatory agencies.

ALL OPTIONS

Knowledge of: The principles of healthcare compliance program administration and organization, business, and personnel administration; modern principles, methods and procedures of healthcare delivery; principles and techniques of effective supervision and staff utilization; development, applications and uses of medical center or healthcare compliance records, reports and statistics; principles of in-service training for healthcare personnel; current trends in healthcare legislation and compliance and its impact on the organization; Joint Commission, federal and state regulatory standards (e.g., HIPAA, Medicare, Medi-Cal, HITECH, Stark Law, False Claims Act, Anti-Kickback Statute, CMS Deficit Reduction Act, OIG Fraud Waste and Abuse) regarding security, privacy and/or healthcare practices in an acute care medical center.

Ability to: Plan, organize, coordinate, develop, implement, and direct regulatory compliance and privacy programs within an integrated healthcare system, including acute-care hospital operations, ambulatory healthcare services, public health programs, and other applicable healthcare settings; interpret and apply federal and state healthcare regulations; conduct compliance investigations and risk assessments; develop corrective action plans; communicate effectively with executive leadership and regulatory agencies; and coordinate multidisciplinary compliance initiatives across diverse organizational departments and programs.

Other Requirements

• Possession of a valid California Driver's License.
• Certified Healthcare Privacy Compliance (CHPC) certificate must be obtained within 12 months from date of hire.

For questions regarding this recruitment: Contact Sarah Teegarden at [phone] or [e-mail]. Please allow 1-2 business days for a response to general inquiries.