Compliance & Privacy Officer

Lawrence Memorial Hospital•Lawrence, KS

About The Position

The Compliance and Privacy Officer is responsible for leading and overseeing LMH Health's enterprise-wide compliance and privacy programs. This position promotes a culture of ethics, integrity, accountability, and regulatory compliance throughout the organization. The Compliance and Privacy Officer serves as the organization's designated Privacy Officer and is responsible for ensuring compliance with applicable federal and state privacy laws, including HIPAA requirements, while also maintaining an effective compliance program that addresses regulatory, operational, and organizational risks. The Compliance and Privacy Officer works collaboratively with leadership, management, employees, consultants, and the Board of Directors to ensure ongoing compliance with applicable healthcare laws, regulations, accreditation requirements, organizational policies, and ethical standards.

Requirements

Bachelor's degree in Healthcare Administration, Business Administration, Public Health, Legal Studies, or related field required.
Minimum of five (5) years of progressively responsible experience in healthcare compliance, privacy, risk management, auditing, legal/regulatory affairs, or a related healthcare field.

Nice To Haves

Master's degree in Healthcare Administration, Business Administration, Public Health, Law, or related field preferred.
Certified in Healthcare Compliance (CHC)
Certified in Healthcare Privacy Compliance (CHPC)
Certified Compliance & Ethics Professional (CCEP)

Responsibilities

Lead and administer the organization's compliance, ethics, and privacy programs to ensure adherence to applicable federal and state laws, regulations, and industry standards.
Serve as the organization's designated Privacy Officer and oversee compliance with HIPAA and other applicable privacy requirements.
Develop, implement, and maintain compliance and privacy policies, procedures, standards, and internal controls.
Conduct compliance and privacy risk assessments and implement strategies to mitigate identified risks.
Monitor regulatory developments and assess organizational impact to ensure ongoing compliance.
Direct compliance auditing, monitoring, investigations, and corrective action activities, including oversight of patient assistance program compliance.
Oversee the investigation, documentation, reporting, remediation, and resolution of compliance concerns, privacy incidents, and potential breaches.
Manage privacy rights requests and ensure the appropriate use, disclosure, and protection of protected health information and other sensitive data.
Develop and administer organization-wide compliance and privacy education and training programs, ensuring completion and documentation in accordance with regulatory requirements.
Promote a culture of integrity, ethical conduct, accountability, and regulatory compliance throughout the organization.
Serve as a trusted advisor and subject matter expert to leadership and staff on compliance, ethics, privacy, and regulatory matters.
Prepare and present reports to executive leadership and the Board of Directors regarding compliance, privacy, risk management, investigations, and program effectiveness.
Collaborate with legal counsel, regulators, auditors, accreditation bodies, and internal stakeholders to support organizational compliance objectives.
Lead and develop assigned staff, including performance management, professional development, and succession planning.