Director of Compliance

Sprout Therapy PDX•Portland, OR

2d•$110,000•Hybrid

About The Position

Sprout Therapy PDX is hiring a Director of Compliance. This Director-level role owns Sprout’s compliance function — HIPAA privacy and security, regulatory compliance (Oregon Administrative Rules, OHA rules, legal oversight, consent documents), and Feedback Informed Treatment (FIT) program operations — while partnering with Clinical Operations and Leadership on COA compliance. A modified clinical caseload and a small supervision group keep this role grounded in the clinical work it governs. This role replaces the previously named Clinical Operations Specialist position. The Director of Compliance sits on Sprout’s Clinical Operations team at the Director level, peer to the Clinical Director and (once hired) the Supplemental Services Supervisor, and reports to the Chief Clinical Officer (CCO).

Requirements

Master’s or Doctoral degree in counseling, social work, psychology, or related field
Active, unrestricted license to practice in Oregon (LPC, LMFT, LCSW, PsyD, or PhD)
Active Approved Supervisor or Supervisor Candidate designation with OBLPCT or OBLSW
5+ years post-Master’s experience in mental health
Demonstrated working knowledge of HIPAA Privacy and Security Rules
Experience with Oregon OARs and OHA-regulated outpatient behavioral health
Experience developing and delivering staff trainings
Strong written and verbal communication; able to translate regulation into plain-language guidance
Alignment with Sprout’s mission, values, and approach to client care
Comfort giving and receiving direct, non-punitive feedback
Ability to hold compliance authority while maintaining collaborative relationships
Tech-savvy and systems-thinking orientation; comfortable building repeatable processes

Nice To Haves

Prior compliance, quality, or accreditation role in a behavioral health setting
Experience working under COA, CARF, or Joint Commission standards
Familiarity with Medicaid/OHP, CCO contracts, and CareOregon audit processes
Experience with FIT or other routine outcome measurement programs
Experience supervising intake, case management, peer support, or similar supplemental service lines
Experience supervising supervisors or managing a supervisor tier
Experience developing or growing therapy programming, specialty service lines, or new clinical offerings (such as group therapy)

Responsibilities

Serve as Sprout’s designated HIPAA Privacy & Security Officer.
Own HIPAA privacy and security policy across privacy, security, breach notification, remote access, BYOD, device transport, disposal, acceptable use, and business associate management.
Conduct annual HIPAA risk analyses, investigate privacy complaints and potential breaches (including four-factor risk analyses and required breach notifications), deliver HIPAA training at onboarding and at least annually, and maintain the Business Associate Agreement inventory.
Serve as first responder for suspected HIPAA security incidents.
Monitor Oregon Administrative Rules and OHA guidance relevant to outpatient behavioral health, associate clinicians, and COA-accredited practices.
Conduct annual review of all client-facing consent documents and coordinate updates to consents, intake packets, and policy documents as rule changes require.
Interpret incoming regulatory and legal documents administratively and flag items requiring legal counsel.
Receive monthly credentialing status report from the administrative team to maintain situational awareness for audit, COA, and payor compliance purposes.
Partner with the Leadership and Clinical Operations teams on development and maintenance of COA policies and practices.
Support internal audits for COA compliance, assist with site review preparation, identify compliance vulnerabilities, and recommend corrective action.
Own the policies specifically assigned for COA first site review readiness, including Advanced Directives for Mental Health Treatment, Policy on Registering to Vote, and Quality Assurance Review.
Own the FIT program end to end: system administration through SimplePractice scored measures, ORS/SRS compliance tracking, monthly aggregate reporting to Leadership and Clinical Operations, CareOregon FIT meeting attendance as Sprout’s designated specialist, and FIT training delivery for new and ongoing clinical staff.
Set and track clinic-wide FIT completion targets.
Coach clinicians on using their FIT data clinically — to pivot treatment approach, identify stagnation, and inform case conceptualization.
Hold practice-wide authority over audit scope, methodology, and findings integration.
Conduct monthly policy-to-practice audits (one policy per month across a sample of records or workflows) and support quarterly fraud, waste, and abuse monitoring.
Support the CEO and CCO in Sprout’s response to external audits from payors, OHA, CCOs, and COA: strategize and draft responses, assemble documentation, and manage audit timelines.
Translate audit findings into actionable corrective actions for supervisors and clinicians, and coach supervisors on integrating audit feedback with their supervisees in a non-punitive, growth-oriented way.
Track corrective action plans through completion.
Serve as an active member of Sprout’s Clinical Operations team alongside the Clinical Director and Supplemental Services Supervisor.
Collaborate on clinic-wide work that spans multiple domains
Partner with the Clinical Director and Leadership Team on practice-wide training program design and materials development.
Develop and deliver Sprout trainings on HIPAA, compliance, OAR changes, FIT, supervisor-tier development, and other topics as assigned.
Identify gaps in staff knowledge through audit findings and close them with targeted programming.
Directly supervise Sprout’s Supplemental Services team — Intake Coordinator, Peer Support and Case Management, and Medication Management — until a Supplemental Services Supervisor is hired.
Provide group supervision to 5 supervisees.
Serve as an OBLPCT or OBLSW Approved Supervisor or Supervisor Candidate.
Meet documentation and response-time standards consistent with all Sprout supervisors.
Maintain 8 paid clinical sessions per week.
Follow all Sprout documentation, timeliness, and response-time standards.