Compliance and Risk Officer

The Providence Community Health Centers, Inc.•Cranston, RI

1d•Hybrid

About The Position

The Compliance and Risk Officer serves as the organization's designated leader for compliance, risk management, HIPAA privacy, patient safety, regulatory oversight, investigations, and ethics. This position is an enterprise-wide leadership role accountable for maintaining an effective culture of compliance, privacy, safety, and risk reduction throughout the organization. The Compliance and Risk Officer is responsible for the development, implementation, oversight, and continuous improvement of Providence Community Health Centers' Corporate Compliance Program, Enterprise Risk Management Program, Patient Safety Program, and Health Insurance Portability and Accountability Act (HIPAA) Privacy Program. The Compliance and Risk Officer serves as the organization's designated Compliance Officer and HIPAA Privacy Officer and provides support in identifying, assessing, mitigating, and monitoring organizational risk while ensuring compliance with applicable federal and state laws, regulations, contractual requirements, and organizational policies. The Compliance and Risk Officer serves as a strategic advisor to executive leadership, leads the Corporate Compliance Committee, and Risk Management Committee, and presents to the Board of Directors regarding compliance, ethics, privacy, patient safety, and enterprise risk management. The position works closely with leadership, providers, staff, legal counsel, corporate insurance agents, regulators, auditors, payors, and other external agencies to promote a culture of compliance, accountability, safety, and continuous improvement.

Requirements

Minimum of five (5) years of progressively responsible experience in healthcare compliance, risk management, privacy, auditing, quality improvement, or related healthcare operations required.
Demonstrated experience conducting investigations, compliance audits, risk assessments, corrective action planning, and policy development.
Strong knowledge of healthcare regulatory requirements, reimbursement programs, quality standards, privacy laws, and risk management principles.
Comprehensive knowledge of healthcare compliance, privacy, risk management, patient safety, and ethics programs.
Strong analytical, investigative, auditing, and problem-solving skills.
Excellent written, verbal, presentation, and interpersonal communication abilities.
Ability to maintain confidentiality and exercise sound judgment in highly sensitive matters.
Ability to interpret and apply complex regulatory requirements.
Demonstrated leadership, project management, and organizational skills.
Ability to work effectively across all levels of the organization and manage multiple priorities simultaneously.
Bachelor's degree in healthcare administration, public health, business administration, nursing, law, compliance, or a related field, or an equivalent combination of education and experience.
Ability to travel between the organization’s locations as needed.
Reliable transportation, valid driver’s license, and proof of insurance required.
Ability to read, analyze, and interpret technical directives; write reports; effectively present information; and respond to questions from employees and the general public.
Ability to add, subtract, multiply and divide in all units of measure, using whole numbers, common fractions and decimals.
Ability to apply common sense understanding to carry out instructions furnished in written or oral form and to deal with problems involving several variables.

Nice To Haves

Experience in a Federally Qualified Health Center (FQHC), community health center, ambulatory care, or other patient-centered healthcare environment preferred.
Certified in Healthcare Compliance (CHC).
Certified Professional in Healthcare Risk Management (CPHRM).
Certified Information Privacy Professional (CIPP) or equivalent privacy certification.
Other applicable healthcare compliance, privacy, or risk management certifications.

Responsibilities

Serve as the organization's Compliance Officer and oversee the Corporate Compliance Program.
Develop, implement, and maintain compliance policies, procedures, training, monitoring, and auditing activities to promote adherence to legal, regulatory, and organizational requirements.
Conduct compliance risk assessments, develop mitigation strategies, and prepare annual compliance work plans.
Monitor compliance with applicable federal and state healthcare laws and regulations, including HIPAA/HITECH, Stark Law, Anti-Kickback Statute, False Claims Act, Medicare, Medicaid, and FTCA requirements.
Oversee compliance investigations, audits, hotline activities, corrective action plans, and reporting processes.
Promote reporting of compliance concerns and ensure timely investigation, resolution, and regulatory reporting when required.
Chair the Corporate Compliance Committee and provide regular reports to executive leadership and the Board of Directors.
Collaborate with Human Resources and operational departments to support exclusion screening and other compliance requirements.
Serve as the organization's HIPAA Privacy Officer and oversee the Privacy Program.
Develop and maintain privacy policies, safeguards, training, and compliance monitoring activities to protect PHI and ePHI.
Conduct privacy risk assessments and compliance reviews.
Investigate privacy complaints, breaches, and unauthorized disclosures, and coordinate required notifications and reporting.
Oversee privacy-related Business Associate Agreement requirements and provide guidance regarding patient privacy rights, confidentiality, and release of information practices.
Partner with Human Resources, Health Information Management, Information Technology, and operational leaders to ensure privacy compliance and appropriate corrective actions.
Serve as the organization's Risk Officer and oversee the Enterprise Risk Management and Patient Safety Programs.
Develop and maintain risk management policies, procedures, training, and monitoring activities designed to identify and mitigate organizational risk.
Review, investigate, and trend incident reports, patient complaints, adverse events, near misses, and patient safety concerns.
Conduct investigations, prepare reports, and recommend corrective actions to address operational, clinical, regulatory, and liability risks.
Identify systemic issues and emerging risks and develop mitigation strategies to reduce organizational exposure.
Present findings and recommendations to leadership and the Risk Management Committee.
Coordinate FTCA risk management activities, claims management, insurer reporting, and annual deeming support.
Ensure timely reporting of incidents to insurers, FTCA representatives, and regulatory agencies as required.
Partner with credentialing staff and organizational leaders to support safe, high-quality patient care and promote a culture of safety and continuous improvement.