Compliance & Privacy Officer

M3 Placement•Albany, NY

3d•Onsite

About The Position

The Center for Disability Services seeks a strategic, data-driven, and transformational Compliance & Privacy Officer to assess, strengthen, and modernize enterprise-wide compliance, privacy, and regulatory operations across the Center for Disability Services, St. Margaret's Center, Prospect Center, and affiliates. The role supports healthcare, residential, educational, and human services programs and helps safeguard organizational integrity, improve regulatory readiness, and foster accountability, transparency, and continuous improvement. The officer is accountable and has direct access to the President and CEO and/or designated senior managers, and has access to the Governing Board. The role reports at least quarterly to the Finance, Compliance and Audit Committee and chairs the agency's Compliance Committee. It manages the Compliance Department and day-to-day compliance program activities, advises organizational leadership and the Board, oversees audits and investigations, and leads the organization’s HIPAA privacy program, training, and compliance improvement efforts.

Requirements

Bachelor's degree in Healthcare Administration, Business Administration, Public Health, Human Services, Law, Finance, Compliance, or a related field.
At least seven years of progressive leadership experience in compliance, privacy, risk management, quality, audit, or regulatory affairs.
Experience developing, leading, or transforming compliance programs within highly regulated organizations.
Demonstrated success leading investigations, audits, regulatory reviews, corrective action plans, and enterprise risk assessments.
Strong understanding of HIPAA, privacy regulations, healthcare compliance, and organizational risk management.
Exceptional written, verbal, presentation, and stakeholder management skills.

Nice To Haves

Certified in Healthcare Compliance (CHC), Certified Compliance & Ethics Professional (CCEP), Certified Information Privacy Professional (CIPP), or a related certification.
Advanced degree in Healthcare Administration, Business, Public Health, Law, or a related field.
Experience presenting to Boards of Directors, Audit Committees, Compliance Committees, or executive leadership teams.
Experience leading compliance technology, reporting, data analytics, or dashboard initiatives.

Responsibilities

Provide executive leadership for the compliance program, with direct access to the President and CEO or designated senior managers and access to the Governing Board.
Report at least quarterly to the Finance, Compliance and Audit Committee and, when needed, the Governing Board on compliance program progress.
Chair the agency's Compliance Committee, which meets at least quarterly.
Manage and oversee the Compliance Department, its staff, and day-to-day compliance program activities.
Understand financial operations and compliance risks across the Center for Disability Services, St. Margaret's Center, Prospect Center, and affiliates.
Compile data for executives, management, and board committees, and identify trends.
Deliver or oversee annual compliance-related training for Board members, management, and staff.
Work with program division executives to monitor and evaluate compliance with the agency's mission and applicable federal, state, and local laws, rules, and regulations.
Partner with senior management and program leaders to establish and implement plans, processes, protocols, tracking systems, and improvements that increase efficiency and service quality and reduce vulnerability to fraud, waste, and abuse.
Draft, implement, and update annual compliance work plans for the Center for Disability Services, St. Margaret's Center, Prospect Center, and affiliates.
Establish, review, revise, and communicate written compliance policies, procedures, and standards of conduct.
Generate program-specific and agency-wide recommendations for compliance improvement and evaluate compliance with applicable laws, rules, and regulations.
Maintain working knowledge of federal and state laws, rules, and regulations affecting agency programs and perform other duties imposed on Compliance Officers by applicable law.
Oversee internal audit and review programs, including audits, investigations, analysis and reporting of results, corrective actions, and interaction with governmental regulators and auditors.
Conduct and oversee regular internal audits and reviews to detect violations and maintain processes that ensure the integrity of reported data.
Serve as the agency's liaison for external audits and review audit results with program management and staff.
Work with executive and management staff to communicate applicable requirements, identify operational obstacles to compliance, develop and pursue plans of correction, and address failures to detect or report violations.
Lead root cause analyses, failure mode and effects analyses, and post-incident debriefings following identified violations.
Ensure corrective actions are implemented and monitored to prevent recurrence, and identify systemic problems and solutions arising from audits, surveys, complaints, investigations, and citations.
Investigate compliance-related incidents as needed and write final reports for internal audits and reviews.
Develop, implement, and review a HIPAA-compliant privacy program to protect the integrity of Protected Health Information and work with executives and management to enforce it.
Deliver or oversee initial and ongoing employee privacy training, privacy risk assessments, and HIPAA-compliant procedures.
Monitor the privacy program, investigate potential PHI breaches or HIPAA non-compliance, and report breaches as required by law.
Create and revise compliance- and HIPAA-related policies and procedures, and oversee or participate in related projects and committees.
Advise program management and staff on compliance, HIPAA, privacy, and confidentiality matters.
Communicate compliance standards, policies, procedures, orientation programs, required trainings, and disciplinary standards to staff, contractors, and volunteers.
Serve as, and oversee, the contact for reports of suspected compliance and ethics violations.
Promote a culture of compliance, accountability, transparency, and ethical conduct.
Research and analyze applicable laws, rules, and regulations and consult related governmental resources.
Maintain strict confidentiality of information concerning patients, residents, people supported and their families, clients, providers, contractors, and employees.
Meet training requirements and adhere to the agency's ethical standards, policies, procedures, and applicable laws and regulations.
Assist with development, implementation, and administration of Human Resources policies and programs, including Equal Employment Opportunity and Affirmative Action initiatives.
Meet safety training requirements, follow safety policies, report unsafe conditions, and take measures to prevent accidents and health or safety risks.