Chief Compliance Officer

St. Charles Health System•Bend, OR

21h•Hybrid

About The Position

The Chief Compliance Officer (CCO) directly oversees, manages, and is responsible for the SCHS compliance program which is broadly and comprehensively defined to include regulatory compliance, privacy/HIPAA, and internal auditing. The CCO models ethical and compliant behavior through day-to-day work activities and fosters a working environment where compliance is the norm. The CCO works collaboratively with leadership and caregivers and employs state-of-the-industry strategies and techniques to routinely assess and address potential risk issues, to investigate reports of noncompliant conduct, and to safeguard the privacy and other rights of patients and caregivers. The CCO will establish a compliance program that is highly effective at preventing risky and noncompliant conduct, and that efficiently identifies and corrects noncompliance when it occurs. This is a hybrid position. Some job duties can be performed remotely without loss of productivity or effectiveness, but some work may require or benefit from onsite presence or in-person collaboration. The CCO is expected to use good judgment about when to work fully on site at a SCHS location, and may be directed to do so at any time based on business need. The CCO reports to the SCHS Senior Vice President, Chief Legal & Risk Officer, and has direct and unfettered access to the Chief Executive Officer (CEO) and to the SCHS Board of Directors’ Audit & Compliance Committee. This position directly oversees assigned caregivers.

Requirements

Required: MBA, JD, MHA, or MHCDS.
Required: Certified in Healthcare Compliance (CHC).
Ability to meet St. Charles Health Systems driving requirements.
Required: Minimum ten (10) years’ experience in audit, accounting, legal, or compliance in health care or related industry.
Minimum five (5) years’ experience managing a team in a health care organization with demonstrated skills in developing strong, collaborative teams.
Must have an established record of high level, practical experience in a multi-function, multi-entity environment, with competencies in system-wide program planning, management, and oversight.
Proficient in collecting and analyzing business processes, workflows, and control relationships.

Nice To Haves

Preferred: MBA with a concentration in Forensic Accounting, Data Analytics, or Healthcare combined. Some clinical experience would be a plus.
Preferred: Certifications in related areas such as Fraud (CFE), Risk Management (CRMA), Coding (CPC), or Privacy (CHPC).
N/A

Responsibilities

Directs the work of the compliance department, manages its budget, and supervises the compliance analysts, internal auditors, and privacy officers.
Oversees compliance-related monitoring activities for the organization, and otherwise generally develops and oversees the Compliance Program consistent with the recommendations of the Office of the Inspector General (OIG), U.S. Department of Health and Human Services, and industry best practices.
Develops an annual compliance work plan, based on an annual risk assessment, and with input from the Compliance Steering Committee and ensures completion throughout the year.
Oversees and administers the comprehensive, system-wide HIPAA Privacy Program. Works collaboratively with the Legal Department and with the Chief Information Security Officer on matters that relate to or involve the Privacy Program. Actively participates as a member of the SCHS External Data Governance Committee.
Develops and oversees the annual risk-based audit plan and related programs and activities; coordinates and assists external auditors and consultants.
Provides audits and other auditing services as requested by senior management, the Board of Directors, or any Board Committee.
Develops, revises, implements, and disseminates compliance-related policies, procedures, training and education, and other similar materials.
Identifies potential risk through a collaborative risk assessment process with key stakeholders, including the Compliance Steering Committee, incorporating relevant information obtained through internal audits and investigations, the compliance hotline, the OIG work plan, and recent enforcement trends.
Develops and oversees a system for uniform handling of verified violations of policy, rules, laws, and regulations including developing and implementing corrective action plans.
In collaboration with the Senior Vice President, Chief Legal & Risk Officer, ensures violations or potential violations are reported to duly authorized enforcement agencies as appropriate and/or required.
Oversees investigations of compliance-related concerns and ensures the fair, prompt, and appropriate resolution of such concerns. Collaborates with the Legal Department, Risk Management, and Human Resources in such investigations when indicated.
Leads organizational response to compliance-related investigations initiated by State and Federal regulatory agencies (e.g. - Office of Civil Rights, OIG, and Department of Justice) in consultation with, and at the direction of, the Senior Vice President, Chief Legal & Risk Officer.
Oversees the conflicts of interest process and serves as initial reviewer of potential conflict of interest disclosures in consultation with, and at the direction of, the Senior Vice President, Chief Legal & Risk Officer.
Collaborates with the Senior Vice President, Chief Legal and Risk Officer and the Senior Vice President, Chief Financial Officer on the development and maintenance of an Enterprise Risk Management Program.
Conducts all activities with the highest standards of professionalism and confidentiality.
Complies with all applicable laws, regulations, policies, and procedures, supporting the health system’s compliance efforts by acting in an ethical and appropriate manner, reporting known or suspected violations of applicable rules, and cooperating fully with all company investigations and proceedings.
Creates and maintains appropriate documentation of all compliance activities.
Provides system level leadership to establish and maintain open lines of communication within the organization to encourage the prompt reporting of compliance concerns.
Champions compliance as a core business principle and empowers caregivers and providers to speak up and do the right thing.
May perform other duties of similar complexity within the organization, as required or assigned.