Director, Legal and Regulatory Compliance

The Centers•Cleveland, OH

2d•Onsite

About The Position

The Director of Legal and Regulatory Compliance leads the organization’s compliance strategy and serves as its designated Privacy Officer. The role provides strategic guidance to senior leadership, designs and implements enterprise-wide compliance programs, and oversees adherence to HIPAA, Medicaid regulations, and other applicable laws and standards. The position is based at 4500 Euclid Avenue, Cleveland, Ohio 44103, and reports to the Senior Vice President of Legal, Risk Management, and Compliance. As Privacy Officer, the Director oversees HIPAA privacy activities for the organization as a covered health care provider and health plan. The role develops and maintains privacy policies and procedures, manages privacy complaints and incidents, conducts compliance audits, supports external investigations, and ensures required documentation, retention, and notices are maintained. The Director also collaborates across Legal, HR, IT/Security, Operations, Program, and Clinical teams to provide guidance and foster ethical conduct.

Requirements

Juris Doctor (JD) or an advanced degree in law, compliance, or a related field.
Proven leadership experience in legal, regulatory, or compliance roles.
Strong ethical judgment and decision-making abilities.
Excellent analytical and problem-solving skills, including the ability to evaluate alternative solutions.
Demonstrated systems thinking and the ability to conceptualize comprehensive approaches.
Superior interpersonal, leadership, and teamwork capabilities.
Exceptional verbal and written communication skills.
Ability to manage complex, multi-faceted workloads and priorities.
Experience functioning as a change agent and communicating recommendations to diverse audiences.

Nice To Haves

Familiarity with HRSA and FQHC (Federally Qualified Health Center) regulations.
Familiarity with Ohio Department of Behavioral Health Services.
Familiarity with third-party provider standards for reimbursement.
Familiarity with Medicare/Medicaid reimbursement structures.
Familiarity with Federal Head Start and Early Head Start programs.
Familiarity with Ohio Board of Pharmacy regulations.
Familiarity with The Joint Commission standards.

Responsibilities

Design, implement, and continuously improve the enterprise-wide compliance program.
Monitor evolving laws, regulations, and industry standards; interpret and communicate their implications to stakeholders.
Collaborate with program leadership to draft, review, and implement organizational policies and procedures.
Oversee compliance with Medicaid and state regulatory agencies.
Lead investigations of regulatory concerns and potential violations.
Supervise Program Compliance Managers.
Oversee the organization’s HIPAA privacy activities as its designated Privacy Officer.
Develop, implement, and maintain comprehensive HIPAA privacy policies and procedures.
Establish and administer processes for receiving, investigating, and resolving privacy complaints.
Lead privacy incident response, breach identification, and notification protocols.
Conduct HIPAA compliance audits and support external investigations.
Coordinate with HR on sanctions for privacy policy violations.
Maintain expert knowledge of laws governing protected health information (PHI).
Ensure compliance with HIPAA documentation, retention, and notice requirements.
Partner with Legal, HR, IT/Security, Operations, Program, and Clinical teams.
Provide expert consultation on privacy, regulatory requirements, and policy matters.
Foster a culture of compliance and ethical conduct throughout the organization.