Compliance/Security Officer

Isaac Health•New York, NY

1d•Remote

About The Position

The Compliance Officer is a key member of the executive leadership team, responsible for the development, implementation, and ongoing management of the organization’s Comprehensive Compliance Program. This role ensures that the organization operates in full accordance with federal and state laws, including HIPAA, CMS (Medicare Advantage/ODAG), and OIG guidelines.

Requirements

Bachelor’s degree required
10+ years of experience in healthcare compliance.
Deep knowledge of HIPAA/HITECH, False Claims Act, Anti-Kickback Statute, and CMS ODAG requirements.
Strong ability to manage a remote, nationwide workforce.

Nice To Haves

Master’s, or healthcare-related advanced degree preferred.
Certification in Healthcare Compliance (CHC) or equivalent is highly desirable.
Past roles at healthtech/other highly regulated technology companies preferred.

Responsibilities

Establish and maintain the foundational "Seven Elements" of an effective compliance program as defined by the OIG.
Draft, implement, and update compliance policies and procedures.
Determine the mandatory compliance curriculum for all employees and contracted providers.
Ensure completion of Fraud, Waste, and Abuse (FWA), HIPAA, and General Compliance training within 90 days of hire and annually thereafter.
Oversee the organization’s status as a First Tier, Downstream, and Related Entity (FDR), ensuring all contracted physicians and vendors meet CMS criteria.
Manage the monthly screening process against OIG (LEIE) and GSA (SAM) databases for all staff and contractors.
Audit the timeliness of Organization Determinations, Appeals, and Grievances to ensure compliance with CMS.
Define the annual audit calendar, focusing on high-risk areas such as multi-state licensure, billing accuracy, and telehealth prescribing.
Maintain and publicize an anonymous reporting "hotline" or channel for staff to report concerns without fear of retaliation.
Lead internal investigations into potential compliance breaches or unethical conduct and oversee corrective action plans.
Chair the internal Compliance Committee and provide regular reports to the Board of Directors and Executive Leadership.
Act as the primary liaison for external audits from payers (e.g., IBX) or government agencies.
Conduct an annual enterprise-wide risk assessment to identify and mitigate emerging regulatory threats.
Work with the technology org to ensure secure, compliant, and safe function across Engineering and IT.
Jointly track customer assessments, requirements, and remediation where needed, and keep abreast of industry trends and standards.
Evaluate current and potential vendors for trustworthiness, security principles and practices, and overall risk to the company.
Own vendor relationships in the security and compliance space.