Senior Compliance Officer

Evermore; United States; Remote; USD 72,000 - 130,000; Full time

Benefits offered by this job

Medical, Dental, and Vision insurance

Employer paid Short-Term Disability

Employer Paid Long-Term Disability

Employer Paid Basic Life Insurance

Employee Assistance Program (EAP)

401(k) Program

Unlimited PTO

Paid holidays

Parental Leave

Job summary

evermore is seeking an experienced Senior Compliance Officer to lead our corporate compliance program and Medicare/Medicaid obligations. Reporting to the SVP of Legal, you will ensure HIPAA compliance and oversee vendors, business associates, and FDRs.

You will build scalable controls for a growing health-tech company, design internal training, draft policies, and coordinate audits and regulatory reporting across the organization.

Qualifications

• 8+ years of regulatory affairs/compliance experience within Medicare or Medicaid.
• 3+ years hands-on experience with FDR/vendor oversight and CMS or First-Tier Entity audits
• Bachelor's degree or equivalent preferred
• Working knowledge of 42 CFR Part 422/423 (Medicare Advantage and Part D regulations) and CMS 201
• Experience with a compliance management or GRC platform to support process automation and regulatory report tracking
• Data privacy experience is a plus, with some overlap with existing team members.
• AML/BSA experience is a plus; training can be provided internally.
• CHC (Certified in Healthcare Compliance) or CHPC preferred
• Demonstrated ability to independently own a compliance function with minimal support staff
• Act as a business enabler with a solutions-oriented approach to compliance.
• Strong written and verbal communication skills for interactions with regulators, auditors, and external partner

Responsibilities

• Oversee third-party and FDR oversight, due diligence, risk tiering, ongoing monitoring, and annual attestation.
• Partner with Legal on business associate agreements, delegation agreements, and required regulatory flow-down provisions in vendor agreements.
• Conduct exclusion and preclusion screening against the OIG LEIE and SAM.gov, the CMS Preclusion List, and applicable state Medicaid exclusion lists; automating the process with IT and confirming results monthly.
• Lead privacy and security incident response: intake, investigation, four-factor breach risk assessment, notification decisions, and reporting to plan clients under our delegation agreements; in cooperation with compliance colleagues across the company.
• Track incidents to closure, including root cause analysis and corrective action.
• Provide strong customer communication, expectation management, and know when to push back on client challenges.
• Draft and maintain compliance policies and procedures.
• Design and present compliance training in-house, developing internal capabilities rather than relying on outside consultants.
• Maintain effective lines of communication for compliance issue reporting, ensuring cross department understanding of key compliance risks and what each department must do to comply
• Conduct internal risk assessments and execute an annual monitoring and auditing work plan.
• Support delegation oversight audits by health plan clients and regulatory examinations by agencies.
• Own corrective action plans through validation and closure, whether self-identified or raised by a client or regulator.
• Prepare, review, and submit required regulatory reports and filings ahead of deadlines.
• Support evermore’s clients’ CMS filing obligations, including benefit specifications and supporting documentation.
• Review and distill program explainers into clear actionable guidance for internal teams
• Work at the speed of product, providing timely compliance input during product design to accelerate go-to-market timelines.

Job description

About evermore

evermore is a technology company that administers Smart Benefits to connect people to products and services they need, when they need them, so they can live healthier lives. We partner with payers and retailers to deliver expansive benefits for things like healthy foods, OTC medications, or transportation. evermore is reinventing benefits administration so that everyone benefits with more value for each and better outcomes for all. evermore is a Series B stage company, backed by leading investors including General Catalyst, Define Ventures, Lightspeed Venture Partners, Pinegrove Capital Partners, and Qiming Venture Partners.

The Role

We are seeking an experienced and dynamic Senior Compliance Officer to support and administer our corporate compliance program and our Medicare and Medicaid compliance obligations. Reporting directly to the SVP of Legal, this role is instrumental to supporting HIPAA and federal healthcare program compliance across our company, with a particular focus on two things: our obligations as a delegated entity to health plan clients, and our oversight of third-parties and subcontractors we rely on – including business associates under HIPAA and vendors that qualify as first tier, downstream, or related entities (FDRs).

The ideal candidate has a strong command of Medicare and Medicaid regulatory requirements, experience in startups or high-growth environments, and the judgment to build practical compliance controls that scale with the business.

What You’ll Do

Third-party and FDR oversight

• Manage the third-party oversight program, including due diligence, risk tiering, ongoing monitoring, and annual attestation for FDRs and Medicaid subcontractors.

• Partner with Legal on business associate agreements, delegation agreements, and required regulatory flow-down provisions in vendor agreements.

Exclusion and preclusion screening

• Conduct exclusion and preclusion screening of employees, contractors, and FDRs against the OIG LEIE and SAM.gov, the CMS Preclusion List, and applicable state Medicaid exclusion lists; automating the process with IT and confirming results monthly.

Incident Response and breach management

• Lead privacy and security incident response: intake, investigation, four-factor breach risk assessment, notification decisions, and reporting to plan clients under our delegation agreements; in cooperation with compliance colleagues across the company.

• Track incidents to closure, including root cause analysis and corrective action.

• Provide strong customer communication, expectation management, and know when to push back on client challenges.

Program administration

• Draft and maintain compliance policies and procedures.

• Design and present compliance training in-house, developing internal capabilities rather than relying on outside consultants.

• Maintain effective lines of communication for compliance issue reporting, ensuring cross department understanding of key compliance risks and what each department must do to comply

Monitoring, auditing, and corrective actions

• Conduct internal risk assessments and execute an annual monitoring and auditing work plan.

• Support delegation oversight audits by health plan clients and regulatory examinations by agencies.

• Own corrective action plans through validation and closure, whether self-identified or raised by a client or regulator.

Regulatory reporting and client filing support

• Prepare, review, and submit required regulatory reports and filings ahead of deadlines.

• Support evermore’s clients’ CMS filing obligations, including benefit specifications and supporting documentation.

• Review and distill program explainers into clear actionable guidance for internal teams

Product and business partnership

• Work at the speed of product, providing timely compliance input during product design to accelerate go-to-market timelines.

What We Look For

While every candidate brings a unique resume and prospective, an ideal candidate will include:

• 8+ years of regulatory affairs/compliance experience within Medicare or Medicaid. Must include prior experience at a start-up or high-growth company, ideally at the intersection of health care, retail, and financial technology

• 3+ years of hands‑on experience with FDR/vendor oversight and CMS or First‑Tier Entity audits

• Bachelor's degree or equivalent preferred

• Working knowledge of 42 CFR Part 422/423 (Medicare Advantage and Part D regulations) and CMS 201

• Experience with a compliance management or GRC platform to support process automation and regulatory report tracking

• Data privacy experience is a plus, with some overlap with existing team members.

• AML/BSA experience is a plus; training can be provided internally.

• CHC (Certified in Healthcare Compliance) or CHPC preferred

• Demonstrated ability to independently own a compliance function with minimal support staff

• Act as a business enabler with a solutions-oriented approach to compliance.

• Strong written and verbal communication skills for interactions with regulators, auditors, and external partner

Other Requirements

• Occasional travel may be required from time to time as part of the role, for company events and business needs.

• evermore is a remote-first, distributed workforce. Candidates should be comfortable with, and equipped to work within, a distributed remote team, including having reliable internet access and basic home office equipment. evermore will provide a work laptop, and mouse/keyboard upon request.

• Legal authorization to work in the US is required. At this time, evermore will not consider candidates who need sponsorship, now or in the future.

• All offers for employment are contingent upon successful completion of a background check.

Benefits & Salary

• Competitive base salary ranging from $71,739 to $129,644, discretionary bonus, and equity; depending on experience/qualifications

• Benefits

  • Medical, Dental, and Vision insurance with 90% paid employer premium contributions for all tiers

  • 100% Employer Paid Short-Term & Long-Term Disability

  • 100% Employer Paid Basic Life Insurance Policy

  • Employee Assistance Program (EAP)

  • 401(k) Program

  • Unlimited PTO

  • Paid holidays

  • Parental Leave

• Remote, from the designated preferred state(s) we are hiring in for this role: Alabama, Arizona, Arkansas, California, Colorado, Connecticut, District of Columbia, Florida, Georgia, Illinois, Kansas, Louisiana, Maryland, Massachusetts, Michigan, Minnesota, Mississippi, Nebraska, New Jersey, New York, North Carolina, Ohio, Oregon, Pennsylvania, South Carolina, Texas, Utah, Virginia, Washington, Wisconsin

(Please note the above benefits & perks are for full-time employees)

evermore participates in E-Verify, the federal program for electronic verification of employment eligibility.

evermore Inc. is an equal opportunity employer. We are committed to diversity and inclusion in our company. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. Applicants requiring reasonable accommodation for the application and/or interview process should notify a representative of the People Operations Team via [e-mail].