Compliance Manager

REVENUE MANAGEMENT SOLUTIONS LLC•Oklahoma City, OK

22h•Onsite

About The Position

The RMS Compliance Manager is responsible for ensuring that the company conducts its business in full compliance with all applicable national laws and regulatory requirements. This role includes the creation, review, enforcement, and oversight of company policies, procedures, and industry best practices to support a strong culture of compliance and ethical operations.

Requirements

Working knowledge of applicable regulatory frameworks (e.g., HIPAA, SOC 2, ISO 27001, or industry-specific standards).
Experience supporting audits, regulatory examinations, and control assessments.
Strong understanding of risk management principles and internal control design.
Excellent analytical, problem-solving, and documentation skills.
Strong written and verbal communication skills with the ability to interface across technical and non-technical teams.
Proficiency with Microsoft Office and compliance documentation tools.
Bachelor’s degree in business, Legal Studies, Compliance, Information Security, Risk Management, or related field.
3–5+ years of experience in compliance, risk management, audit, or information security.
Demonstrated experience developing or maintaining policies, conducting risk assessments, and supporting remediation efforts.
Familiarity with industry regulations and regulatory reporting requirements relevant to the organization.

Nice To Haves

Professional certifications such as CISSP, CISM, CISA, CRCM, CCEP, or similar preferred.

Responsibilities

Conduct compliance and risk assessments, including internal control testing.
Prepare for and respond to external audits, regulatory inquiries, and legal requests.
Manage third-party vendor risk assessments and ongoing monitoring.
Oversee incident and breach response, including investigation, notification, and remediation.
Maintain and enhance SOC 2 controls, documentation, and evidence management.
Track and validate remediation efforts to ensure control effectiveness.
Develop and enforce policies related to PHI, data classification, encryption, access controls, and data retention.
Coordinate regulatory and privacy aspects of incident and breach response, Ensure notification obligations are met.
Evaluate business systems and operations for regulatory and ethical compliance.
Draft, update, and implement corporate compliance policies and procedures.
Lead mandatory compliance training programs (e.g., security awareness, HIPAA) and manage LMS tracking and reporting.
Conduct phishing simulations and targeted security awareness initiatives.
Partner with cross-functional leaders to ensure operational compliance.
Perform other related duties as assigned.