Compliance Privacy Manager

Intermountain Health•Dayton, OH

3d•$52 - $80•Hybrid

About The Position

The Compliance Privacy Manager supports Intermountain Health’s Privacy Compliance Program as part of the Compliance & Ethics team. Working closely with the Chief Privacy Officer and Privacy Director, the role supports day-to-day privacy operations, particularly privacy agreements and vendor privacy reviews. As a subject matter expert and consultant, the position manages complex and sensitive compliance projects and provides guidance, education, monitoring, and implementation support to leaders, physicians, clinicians, and caregivers. The role is hybrid and requires on-site presence at times for training and meetings. Core business hours are Monday through Friday, 8:00 a.m. to 5:00 p.m. The position is based at Key Bank Tower in Salt Lake City, Utah, and is scheduled for 40 hours per week. The hourly pay range is $51.73–$79.87, with the actual rate depending on experience.

Requirements

High school diploma or GED.
Demonstrated professional experience in a regulatory, compliance, or risk management role in the healthcare sector.
Thorough knowledge of federal and state healthcare laws and regulations related to billing, coding, reimbursement, contracting, and risk adjustment, including Medicare, Medicaid, HIPAA, the False Claims Act, the Anti-Kickback Statute, Stark Law, and MACRA.
Ability to interpret and apply complex healthcare regulations in a healthcare system, assess and evaluate gaps, and demonstrate knowledge of the healthcare industry.
Strong communication, presentation, and interpersonal skills, including the ability to influence and collaborate with diverse stakeholders.
Discretion in maintaining confidential information, evaluating alternatives, and making effective decisions.
Demonstrated experience implementing the eight elements of an effective compliance program.
High ethical standards, integrity, and professionalism, and commitment to Intermountain Health’s mission, vision, values, and compliance framework.
The degree, if held, must be obtained through an accredited institution; education is verified.

Nice To Haves

Bachelor’s degree in healthcare administration or a related field.
Experience negotiating privacy and data protection agreements, including Business Associate Agreements (BAAs) and Data Use Agreements (DUAs).
Working knowledge of HIPAA Privacy, Security, and Breach Notification Rules, as well as applicable state privacy and data protection laws.
Healthcare privacy or compliance certification, such as CHPC, CHPS, or a comparable credential.
Experience supporting privacy compliance programs, including privacy agreement management and vendor privacy reviews.
Experience collaborating with privacy, compliance, legal, and business stakeholders on complex privacy and data protection matters.

Responsibilities

Establish and maintain effective relationships and communication channels with internal and external stakeholders, and promote mechanisms that encourage a culture of compliance and reporting.
Lead or participate in cross-functional teams addressing regulatory risk and implementing regulatory requirements through projects and assignments.
Evaluate and identify risks, and develop and lead corrective action plans across an assigned portfolio of products, service lines, or geographies.
Propose adjustments to the organization’s risk response and lead implementation of changes with oversight and direction.
Develop and implement corrective action plans and remediation measures for compliance issues or deficiencies identified by audits, investigations, or regulatory agencies.
Monitor and analyze changes in the regulatory environment and enforcement landscape, assess their organizational impact, and implement monitoring and auditing activities based on industry best practices.
Guide and support leaders and business units on regulatory compliance issues and requirements, and recommend solutions to ensure compliance.
Develop and deliver compliance education and training programs for relevant stakeholders, including employees, providers, and business partners.
Investigate and respond to compliance complaints, allegations, or incidents, coordinating with legal counsel, human resources, and other departments as appropriate.
Identify and implement best practices and continuous improvement initiatives to improve regulatory compliance performance and culture.
Coordinate closely with Compliance Department leadership to promote a culture of compliance and ethics and reduce the organization’s risk of government audits, fines, penalties, and sanctions.
Support day-to-day privacy operations, with a primary focus on privacy agreements and vendor privacy reviews.
Provide guidance, education, monitoring, and implementation support to leaders, physicians, clinicians, and caregivers on privacy compliance matters.