Chief Risk and Compliance Officer

Behavioral Health Allies•Kansas City, MO

About The Position

The Chief Risk and Compliance Officer (CRCO) is BHA’s senior executive accountable for protecting the individuals served, the workforce, and the organization from preventable harm and loss. Reporting to the CEO, the CRCO leads enterprise risk management across Community Living, BHA Academy, the Early Intervention Clinic, Special Contracts, and Transportation, and serves as BHA’s designated Compliance Officer. The CRCO owns the full risk lifecycle: preventing client and staff harm; identifying and mitigating workplace-injury risks; reducing liability and litigation exposure; leading commercial insurance strategy; and ensuring compliance with DMH, DESE, Medicaid, and other regulatory requirements. The role is expected to measurably reduce the frequency and severity of incidents, injuries, and claims; position BHA as a well-controlled risk to insurers and regulators; and provide the CEO, executive team, and Board with clear, candid visibility into BHA’s risk profile. Guided by BHA’s Core Values, the CRCO builds a culture in which safety, accountability, and dignity are part of how every division operates. The role is a member of BHA’s executive leadership team and shares accountability for organizational strategy, growth decisions, and enterprise performance.

Requirements

Bachelor’s degree in Risk Management, Healthcare Administration, Public Health, Business Administration, Occupational Safety, Law, or a related field.
At least 7 years of progressive experience in risk management, compliance, client/patient safety, or regulatory affairs, including at least 5 years leading the function at director level or above.
Experience in at least one high-acuity setting comparable to BHA, such as residential IDD services, a psychiatric hospital, legal or law enforcement, a psychiatric residential treatment facility (PRTF), a governmental entity, child welfare or residential treatment, healthcare, special education or school district risk management, or community behavioral health.
Hands-on experience managing liability claims with carriers and third-party administrators, analyzing workers’ compensation loss trends, partnering with brokers on commercial insurance renewals, and managing litigation with defense counsel.
Track record leading organizations through regulatory surveys, audits, investigations, and corrective action plans, such as DMH, DESE, CMS/Medicaid, The Joint Commission, or CARF processes.
Experience serving on or reporting directly to an executive leadership team, including preparing and presenting risk and compliance reports to a board of directors or governing body.
Experience leading risk and compliance across multiple sites and service lines, managing a departmental budget, and supervising managers or directors.
Valid driver’s license, acceptable motor vehicle record, and ability to pass all BHA background and registry screenings.
Strategic, enterprise-wide thinking that connects risk, compliance, and insurance decisions to organizational strategy, financial performance, and growth plans.
Executive-level judgment to weigh risk against mission, operations, and cost and provide the CEO with clear, actionable recommendations.
Working knowledge of Missouri DMH Division of Developmental Disabilities standards and abuse/neglect reporting; DESE requirements for private special education agencies, including restraint and seclusion; IDEA, Section 504, and the ADA; Medicaid program integrity and OIG compliance program elements; HIPAA; OSHA, including workplace violence prevention; Missouri workers’ compensation law; and licensing requirements in other states served through Special Contracts.
Insurance and financial literacy, including loss runs, reserves, experience modification rates, retentions and deductibles, total cost of risk, policy forms, and contract indemnification language.
Strong investigation and root cause analysis skills, including the ability to turn incident and claims data into prevention strategies adopted by frontline leaders.
Credible, calm communication with regulators, insurers, attorneys, families, and frontline staff, including in crisis and adversarial situations.
High ethical standards and discretion with PHI, personnel matters, and privileged legal information.
Proficiency with incident management and risk management information systems, electronic health records, and data and dashboard tools.

Nice To Haves

Master’s degree (MHA, MBA, MPH, MSW, or similar) or Juris Doctor.
Professional certification, or ability to attain one within 24 months of hire: Associate in Risk Management (ARM), Certified Professional in Health Care Risk Management (CPHRM), Certified in Healthcare Compliance (CHC), Certified in Healthcare Privacy Compliance (CHPC), CSP/ASP, or equivalent.

Responsibilities

Lead enterprise-wide risk management across all BHA service lines and serve as the organization’s designated Compliance Officer.
Set risk, safety, and compliance standards that all divisions, including divisional Chiefs and Vice Presidents, are required to follow.
Prevent client and staff harm and identify and mitigate the drivers of workplace injuries.
Reduce liability and litigation exposure and lead BHA’s commercial insurance strategy.
Ensure compliance with DMH, DESE, Medicaid, and other regulatory requirements.
Measurably reduce the frequency and severity of incidents, injuries, and claims.
Provide the CEO, executive team, and Board with clear, candid visibility into BHA’s risk profile.
Pause or modify practices, placements, staff assignments, or program activities presenting imminent risk of serious harm or serious regulatory exposure, with immediate notice to the CEO and responsible executive.
Provide required risk sign-off before launching new service lines, locations, or contracts, and on contract terms involving indemnification, insurance, or liability.
Escalate significant risk and compliance concerns directly to the CEO and engage outside legal counsel as needed.
Approve claim settlements and litigation strategy within authority limits set by the CEO and CFO.
Hold divisional leaders accountable for completing corrective actions and risk mitigation plans within agreed timeframes, and escalate overdue items to the CEO.
Lead the risk and compliance function across multiple sites and service lines, including managing a departmental budget and supervising managers or directors.
Lead organizations through regulatory surveys, audits, investigations, and corrective action plans.
Prepare and present risk and compliance reports to a board of directors or governing body.