Compliance Officer

Forus•New York, NY

21h•Onsite

About The Position

As Compliance Officer at Forus, you will build a modern healthcare compliance program and lay the foundation for client and partner trust. You will work directly with the General Counsel and teams across the company. You will tackle complex healthcare, privacy, AI, and data-use questions, pairing strong judgment with practical execution. Forus is at a pivotal point. Our network, partnerships, products, and use of AI are expanding rapidly. The compliance and privacy foundations we build now will shape how the company scales and how clients trust us. This is a demanding role, with a high level of autonomy and responsibility. You will be expected to "act like an owner" and commit yourself to Forus' success. If you are low-ego, hungry to learn, and excited about intense, impactful work that drives both company growth and accelerated career progression, we want to hear from you.

Requirements

10+ years of compliance, privacy, legal, or regulatory experience, including meaningful hands-on ownership of a compliance program.
Ideally, 5+ years of healthcare compliance experience spanning HIPAA/HITECH, fraud and abuse, investigations, monitoring, policies, and corrective action.
Outstanding written and verbal communication that enables you to translate complex compliance requirements into strategic and actionable guidance.
Ability to go from an ambiguous question to a clear, structured answer with minimal guidance
Track record of moving quickly, finding shortcuts, and going to unreasonable lengths to deliver on goals.
High NPS with your former teammates.

Responsibilities

Own Forus’s OIG-aligned healthcare compliance program to support our operations and maintain the client and partner trust that is essential to our business.
Oversee Forus’s privacy and HIPAA compliance programs, including policies, workforce training, minimum-necessary practices, and partnership with Security on technical controls.
Operationalize compliance requirements and own the policy, training, monitoring, and remediation cycles, and provide practical day-to-day guidance to the business.
Lead all aspects of compliance incident response including investigations, risk and breach assessments, remediation, and trend analysis.
Partner with functions including Legal, Security, Clinical, and Engineering on annual enterprise risk assessments and additional audits and certification processes.
Co-own AI and data use governance, including risk assessment, human oversight, testing, monitoring, incident response, vendor diligence, and clear reporting to leadership.