RUHS Compliance Director - Corporate Compliance

County of Riverside•Riverside, CA

1d•Onsite

About The Position

The County of Riverside’s Riverside University Health System (RUHS) is seeking a Compliance Director for its Corporate Compliance department. The position is based in Riverside, California, and works under general direction to plan, organize, coordinate, and direct assigned regulatory compliance, privacy, and health information confidentiality activities across RUHS Medical Center, Public Health, Behavioral Health, and other designated departments, facilities, clinics, and programs. The director coordinates compliance activities, implements regulatory requirements, monitors risks, directs investigations, and supports corrective actions. The position collaborates with RUHS executive leadership, departmental administrators, the RUHS Compliance and County Privacy Officer, and other stakeholders to promote compliance with applicable federal and state laws, regulations, and policies. It also supports enterprise-wide compliance and privacy initiatives under designated RUHS compliance leadership. The role is eligible for the Performance Recognition Plan, subject to program requirements. The work schedule is 9/80. A valid California Driver’s License is required, and the Certified Healthcare Privacy Compliance (CHPC) certificate must be obtained within 12 months of hire.

Requirements

Option I: Bachelor’s degree from an accredited college or university; preferred majors include nursing, nursing administration, business, healthcare, public health administration, or a closely related field.
Option I: Three years of healthcare regulatory compliance administration, including two years of management experience directing an organization’s compliance program. A qualifying master’s degree may substitute for one year of the required non-management experience.
Option II: Bachelor’s degree from an accredited college or university; preferred majors include nursing, nursing administration, business, healthcare, public health administration, or a closely related field.
Option II: Five years in an administrative healthcare capacity, including responsibility for developing and implementing compliance programs related to privacy, patient health information management, and compliance with regulatory and accrediting-agency standards.
Knowledge of healthcare compliance program administration; business and personnel administration; healthcare delivery; supervision and staff utilization; healthcare compliance records, reports, and statistics; in-service training; and healthcare legislation and its organizational impact.
Knowledge of Joint Commission and federal and state regulatory standards, including HIPAA, Medicare, Medi-Cal, HITECH, Stark Law, False Claims Act, Anti-Kickback Statute, CMS Deficit Reduction Act, and OIG fraud, waste, and abuse requirements concerning security, privacy, and healthcare practices in an acute-care medical center.
Ability to plan, organize, coordinate, develop, implement, and direct regulatory compliance and privacy programs across an integrated healthcare system, including acute-care, ambulatory, public health, and other healthcare settings.
Ability to interpret and apply federal and state healthcare regulations; conduct compliance investigations and risk assessments; develop corrective action plans; communicate effectively with executive leadership and regulatory agencies; and coordinate multidisciplinary initiatives.
Possession of a valid California Driver’s License.
Obtain Certified Healthcare Privacy Compliance (CHPC) certification within 12 months from date of hire.

Nice To Haves

Master’s degree in healthcare, hospital or nursing administration, or a closely related field.
Professional experience in healthcare compliance and privacy within an acute-care hospital setting.
Experience investigating and managing patient privacy breaches, conducting risk assessments, coordinating corrective actions, and preparing and submitting reports or notifications to regulatory agencies including CDPH, DHCS, OCR, and OIG.

Responsibilities

Assist the RUHS Compliance and County Privacy Officer with implementation, coordination, monitoring, and evaluation of regulatory compliance and privacy activities across RUHS.
Provide regulatory compliance and privacy guidance to RUHS Public Health leadership and staff on confidentiality, public health reporting, information sharing, and appropriate use and disclosure of protected health information and other confidential information.
Direct or coordinate investigations of reported or suspected privacy incidents, unauthorized access, impermissible disclosures, and other potential confidentiality violations; evaluate findings, coordinate corrective actions, and assist with required regulatory notifications.
Coordinate compliance audits, monitoring, and risk assessments across assigned departments and programs, identify regulatory vulnerabilities, and recommend corrective actions.
Assist with development, implementation, and review of enterprise-wide compliance and privacy policies, procedures, standards, and operational practices.
Collaborate with Information Technology, Health Information Management, Public Health, Legal Counsel, Human Resources, Risk Management, and departmental leadership on privacy, information security, compliance, and corrective actions.
Evaluate privacy and regulatory compliance considerations for electronic health records, health information exchanges, data-sharing agreements, business associate arrangements, third-party system access, and other activities involving confidential health information.
Coordinate and monitor corrective action plans arising from regulatory surveys, investigations, audits, external reviews, and identified deficiencies.
Assist in preparing and coordinating responses to regulatory inquiries, investigations, audits, and information requests from agencies including CDPH, DHCS, CMS, OCR, and other oversight authorities.
Develop and deliver compliance and privacy education, training, and guidance to workforce members and departmental leadership.
Prepare and present compliance reports, investigation summaries, regulatory updates, risk assessments, and recommendations to executive leadership and compliance oversight committees.
Develop and implement policies, standards, and procedures to ensure regulatory compliance.
Document, retain, track, investigate, and resolve complaints.
Disseminate audit findings and oversee appropriate corrective actions and sanctions.
Provide timely reports to the RUHS-MC Chief Executive Officer, COO, and executive management, as applicable.
Select, assign, and direct subordinate employees, directly and through supervisory staff, where applicable.
Coordinate regulatory surveys, including Joint Commission, state licensing, and CMS validation surveys.
Advise department managers on interpreting and enforcing applicable policies and regulations.
Manage the RUHS-MC HIPAA compliance hotline if that responsibility remains assigned to the position.
Monitor changes in federal and state healthcare laws and regulations.
Attend and conduct staff, committee, and professional meetings.