Sr. Director, Compliance and Privacy

American Health Plans; Franklin (TN); On-site; USD 120,000 - 180,000; Full time

Job summary

American Health Plans in Franklin, Tennessee, seeks a Senior Director of Compliance & Privacy to lead the organization's compliance and privacy programs under the Health Plan Compliance Officer.

You will develop, implement, and maintain a robust framework aligned with HIPAA, federal and state regulations, and organizational policies, while serving as HIPAA Privacy Officer and building a culture of ethics and regulatory excellence.

Qualifications

• Bachelor's degree in a healthcare/administration field is required.
• Minimum of three years leading healthcare compliance or privacy programs.
• Professional certification such as CHC/CCEP is preferred.

Responsibilities

• Lead and manage the organization’s compliance program in line with regulations.
• Supervise compliance staff and foster a high-performing team.
• Design and oversee internal auditing and risk assessments.
• Oversee privacy incidents and investigations, breach reporting.
• Coordinate external audits and corrective action plans.
• Develop, implement, and maintain compliance policies and training.

Skills

Project management

Regulatory interpretation

Leadership

Compliance program

Education

Bachelor’s degree in Healthcare Administration, Public Health, Business Administration, Health Information Management, Law, or a related field

Tools

Microsoft Office

Compliance management systems

Incident reporting platforms

Job description

American Health Plans
Franklin, TN 37067, USA

Description

JOB SUMMARY:
Under the direction of the Health Plan Compliance Officer, the Senior Director of Compliance & Privacy provides leadership and oversight of the organization’s compliance and privacy programs. This position is responsible for developing, implementing, and maintaining an effective compliance framework that promotes adherence to applicable federal and state laws, HIPAA regulations, and organizational policies. The Senior Director of Compliance & Privacy fosters a culture of ethics, accountability, and regulatory excellence while also serving as the organization’s HIPAA Privacy Officer.

ESSENTIAL JOB DUTIES

• Lead, develop, and manage the organization’s compliance program in alignment with federal and state regulations, and industry best practices.
• Supervise and mentor compliance staff, building a high-performing, collaborative team environment.
• Design and oversee internal auditing and monitoring programs, conduct enterprise-wide risk assessments, maintain the annual compliance auditing and monitoring work plan.
• Identify vulnerabilities and implement mitigation strategies.
• Oversee incident reporting and compliance investigations, ensuring timely resolution and appropriate corrective action.
• Oversee and coordinate external audits, reviews, site visits, and inquiries conducted by regulatory agencies, and other oversight entities, lead ongoing readiness activities to ensure organizational preparedness, and oversee corrective action plans resulting from internal and external audit findings.
• Oversee compliance committee activities and present regular updates to leadership and stakeholders.
• Develop, implement, and maintain compliance policies, procedures, and standards of conduct.
• Design and deliver compliance training and promote awareness of compliance standards, regulatory requirements and ethical behavior across the organization.
• Monitor changes in applicable federal, state, local, and grant-related regulatory requirements and evaluate operational impacts to ensure ongoing compliance, including but not limited to Medicare Advantage and Prescription Drug Program requirements and regulations, 340B Drug Pricing Program compliance requirements, HIPAA Privacy, Security, and Breach Notification Rules, Medicare program requirements, Fraud, Waste, and Abuse laws and regulations, Office of Inspector General (OIG) compliance guidance, applicable state health maintenance organization regulations and reporting requirements, clinical documentation, quality, and patient safety standards.
• Serve as HIPAA Privacy Officer and collaborate with the designated HIPAA Security Officer and Legal division staff to ensure coordinated oversight of privacy and security compliance activities.
• Oversee privacy incident responses and investigations, breach notification and reporting requirements, annual HIPAA risk assessments and mitigation activities.
• Performs other duties as assigned.

JOB REQUIREMENTS

• Strong project management and organizational skills with the ability to manage multiple priorities and deadlines.
• Excellent written, verbal, and presentation skills.
• Ability to interpret and communicate complex regulatory requirements in a clear and practical manner.
• Strong interpersonal skills and ability to build collaborative relationships across all organizational levels.
• Proficiency with Microsoft Office applications, compliance management systems, incident reporting platforms.
• Ability to analyze data, prepare reports, and monitor compliance metrics and key performance indicators.

REQUIRED QUALIFICATIONS

• Bachelor’s degree in Healthcare Administration, Public Health, Business Administration, Health Information Management, Law, or a related field required.
• Minimum of three (3) years of progressively responsible experience in healthcare compliance, privacy, risk management, auditing, legal/regulatory affairs, or related healthcare operations.
• Minimum of three (3) years of leadership or management experience overseeing compliance and/or privacy programs.
• Relevant professional certification, such as Certified in Healthcare Compliance (CHC), Certified Compliance and Ethics Professional (CCEP), Certified in Healthcare Privacy Compliance.

Qualifications

Licenses & Certifications

Preferred

Equal Opportunity Employer
This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor.