Compliance Program Analyst

Signature Performance, Inc.•,

About The Position

The Compliance Program Analyst will serve as a key contributor to compliance governance activities, policy management, privacy oversight, regulatory management, third-party compliance monitoring, and enterprise audit readiness. This role involves supporting the development, implementation, maintenance, and continuous improvement of enterprise compliance and privacy programs. The analyst will collaborate to identify compliance risks, support corrective actions, monitor program effectiveness, and promote a culture of compliance and ethical business conduct.

Requirements

Bachelor's degree in Healthcare Administration, Business Administration, Compliance, Risk Management, Public Health, Legal Studies, Information Governance, or related field.
Five (5) or more years of experience supporting compliance, privacy, auditing, governance, risk management, investigations, regulatory affairs, or related functions.
Working knowledge of: HIPAA, HITECH, False Claims Act, Anti-Kickback Statute, Stark Law, Federal healthcare program requirements, Healthcare regulatory compliance principles.
Experience conducting audits, compliance reviews, investigations, or risk assessments.
Experience drafting, reviewing, and maintaining policies, standards, or procedures.
Strong analytical, research, writing, and problem-solving abilities.
Ability to interpret complex legal, regulatory, contractual, and policy requirements.
Experience preparing executive-level reports and presentations.
Strong organizational skills with the ability to manage multiple priorities simultaneously.
Demonstrated ability to support compliance program management activities, including work planning, issue tracking, corrective action monitoring, documentation, and coordination across business functions.
Strong regulatory research and analysis skills, with the ability to interpret healthcare, privacy, contractual, policy, and government program requirements and translate them into practical compliance actions.
Ability to conduct risk assessments, compliance monitoring, and trend analysis to identify emerging risks, recurring issues, and opportunities for program improvement.
Working knowledge of privacy program administration, including privacy incident intake, investigation support, documentation, mitigation tracking, and reporting.
Ability to support policy governance activities, including policy drafting, review coordination, version control, periodic review, exception tracking, and maintenance of policy records.
Sound investigative skills, including fact gathering, issue documentation, root cause analysis, evidence review, and development of clear, objective recommendations.
Ability to coordinate audit and assessment activities, including evidence collection, stakeholder follow-up, response preparation, finding documentation, and remediation tracking.
Knowledge of vendor and third-party compliance oversight, including review of vendor documentation, contract obligation tracking, business associate oversight, attestations, and corrective action follow-up.
Strong data analytics and reporting skills, including the ability to develop metrics, analyze compliance data, identify trends, and prepare clear dashboards, reports, and executive-level summaries.
Excellent written and verbal communication skills, with the ability to communicate clearly, tactfully, and professionally with operational teams, leadership, governance committees, auditors, customers, and other stakeholders.
Strong critical thinking, professional judgment, organization, and prioritization skills, including the ability to manage multiple short- and long-term priorities, adapt quickly, and work independently with limited direction.
Consistently demonstrates professional integrity, objectivity, discretion, ethical conduct, and the ability to maintain confidentiality when handling sensitive business, compliance, privacy, personnel, and investigative information.
Proficiency with Microsoft Office 365 applications and related tools used to support documentation, reporting, collaboration, tracking, and compliance program administration.
U.S. Citizenship or naturalized citizenship is required for this position.
All work on all positions at Signature Performance must be completed in the continental United States, Alaska, or Hawaii.

Nice To Haves

Experience in healthcare payer, federal healthcare, managed care, government contracting, or healthcare technology environments.
Experience supporting compliance management systems, governance platforms, or issue management tools.
Experience with vendor risk management or third-party compliance programs.
Experience with audit coordination and remediation tracking.
Familiarity with NIST, CMMC, SOC, FedRAMP, or related compliance frameworks.
Experience with compliance metrics, reporting, and dashboard development.
CHC (Certified in Healthcare Compliance)
CHPC (Certified in Healthcare Privacy Compliance)
CCEP (Certified Compliance and Ethics Professional)
HCISPP (Healthcare Information Security and Privacy Practitioner)
CISA (Certified Information Systems Auditor)

Responsibilities

Perform compliance monitoring, auditing, and testing activities to evaluate adherence to regulatory, contractual, privacy, and corporate policy requirements.
Conduct risk-based reviews and assessments to identify compliance vulnerabilities and emerging risks.
Document observations, findings, root causes, and recommendations for corrective action.
Monitor corrective action plans and remediation activities through completion.
Support enterprise compliance risk assessments and annual compliance work plans.
Analyze trends and recurring issues to identify systemic compliance concerns.
Assist with the administration of Signature's Privacy Program and related compliance activities.
Research and interpret HIPAA, HITECH, state privacy laws, and contractual privacy obligations.
Investigate privacy concerns, potential unauthorized disclosures, breaches, and privacy complaints.
Coordinate documentation, mitigation activities, and required follow-up actions.
Track privacy incidents and support reporting and trend analysis activities.
Assist with privacy-related training and awareness initiatives.
Support third-party compliance and vendor risk management activities.
Coordinate annual vendor compliance reviews, attestations, and contract obligation tracking.
Review compliance-related documentation provided by vendors, subcontractors, and business associates.
Assist with Business Associate Agreement administration and oversight activities.
Monitor vendor corrective actions and compliance commitments.
Monitor changes in applicable federal and state healthcare regulations, privacy requirements, government contracting requirements, and customer obligations.
Research emerging regulations and assess potential organizational impact.
Maintain regulatory obligation inventories and compliance tracking mechanisms.
Assist business stakeholders with implementing new compliance requirements.
Support the enterprise policy governance lifecycle including drafting, review, publication, maintenance, exception tracking, periodic reviews, and retirement activities.
Conduct quality reviews to ensure policies are clear, accurate, consistent, and aligned with legal, regulatory, and contractual requirements.
Maintain policy inventories, approval documentation, and policy records.
Facilitate policy governance meetings and coordinate policy updates with business owners.
Support investigations related to compliance concerns, ethics reports, policy violations, privacy incidents, and contractual compliance matters.
Collaborate with management, Human Resources, Legal, Information Compliance & Security, and operational teams as appropriate.
Assist with root cause analysis and corrective action development.
Maintain investigation records and documentation in accordance with organizational requirements.
Support internal audits, external audits, customer reviews, regulatory assessments, and certification activities.
Coordinate evidence collection, documentation requests, remediation tracking, and audit responses.
Maintain audit findings logs and report remediation status to leadership.
Assist with preparation for regulatory reviews and customer compliance assessments.
Develop compliance dashboards, metrics, and reports for leadership and governance committees.
Monitor key compliance indicators and risk trends.
Analyze data to identify compliance concerns and opportunities for program improvement.
Prepare periodic reports and presentations for the Corporate Compliance Committee and executive leadership.
Prepare materials, reports, presentations, and metrics for the Corporate Compliance Committee.
Support compliance awareness initiatives and annual Compliance and Ethics Week activities.
Participate in compliance education and organizational awareness efforts.
Assist with special projects and strategic compliance initiatives.