Director/Senior Director of Compliance

Greater Baden Medical Services, Inc.•Brandywine, MD

15h•Onsite

About The Position

The Director/Senior Director of Compliance will build, lead, and oversee a comprehensive organizational compliance program from the ground up at Greater Baden Medical Services (GBMS). Reporting directly to the Chief Executive Officer (CEO), this individual serves as a hands-on subject-matter expert and program owner. The Compliance Director is responsible for the day-to-day management and execution of the organization’s compliance, privacy, and regulatory support activities. The ideal candidate is an agile, forward-thinking leader who thrives in a dynamic environment. They must possess a deep passion for continuous learning and have a proven ability to adapt to an evolving organizational structure while embedding a culture of compliance, integrity, and accountability across all service lines.

Requirements

Juris Doctor (JD) degree preferred from an accredited law school.
Bachelor’s or Master’s degree in Healthcare Administration, Public Health, Business, or a closely related field required.
Minimum of 5–8 years of direct healthcare compliance, privacy, or regulatory leadership experience specifically within a Federally Qualified Health Center (FQHC) environment.
Proven, deep working knowledge of the HRSA Health Center Program requirements, FTCA compliance obligations, and Joint Commission accreditation standards.
Extensive familiarity with federal healthcare legislation (including HIPAA/HITECH), Medicare/Medicaid regulations, and navigating state and local regulatory frameworks.
Demonstrated success designing internal audit workflows, conducting healthcare risk assessments, managing external federal audits, and leading compliance investigations.
Ability to read, interpret, and communicate written and verbal instructions effectively with employees, candidates, and stakeholders.
Must comply with Greater Baden Medical Services policies, compliance standards, and Code of Conduct.
Must be able to travel between GBMS locations as needed.

Nice To Haves

Certified in Healthcare Compliance (CHC) or Certified in Healthcare Privacy Compliance (CHPC) highly desirable.

Responsibilities

Design, implement, and lead GBMS’s formal corporate compliance program in strict alignment with HRSA, CMS, OIG, FTCA, and HIPAA requirements.
Establish a strategic roadmap for building program components over time and adapt compliance frameworks as the organization's structure grows and evolves.
Foster organizational awareness, reinforcing ethical conduct, accountability, and transparency through ongoing consultation and education.
Serve as the primary operational contact and project manager for HRSA Operational Site Visits (OSVs) and other federal reviews.
Maintain continuous audit readiness via internal checklists, mock reviews, and structured document management.
Lead the management, tracking, and processing of HRSA Federal Tort Claims Act (FTCA) activities.
Drive compliance preparation and documentation tracking to maintain the organization's Joint Commission accreditation and alignment with clinical quality metrics.
Oversee regulatory adherence for targeted FQHC service line programs, including the 340B Pharmacy program landscape, sliding fee discount programs, and data integrity for UDS reporting.
Oversee regulations, provider enrollment, and billing rules associated with Medicare and Medicaid/Managed Care programs, ensuring strict adherence to federal and state healthcare laws.
Partner with clinical and operational teams to ensure all site licenses, clinic certifications, and professional credentialing/privileging processes are kept up to date.
Actively monitor, interpret, and translate complex federal, state, and regional/local healthcare requirements into clear operational policies and clinical guidance.
Prepare and execute an annual risk assessment and compliance workplan, targeting high-risk areas such as clinical documentation, coding, and billing compliance.
Administer internal compliance systems used for the intake, tracking, and confidential reporting of compliance concerns, patient incidents, and grievances.
Conduct thorough root-cause analyses and investigations regarding noncompliance or privacy breaches.
Develop, implement, and track corrective action and remediation plans to completion.
Serve as the designated HIPAA Privacy/Security Officer.
Manage policies, workforce training, and the execution/monitoring of Business Associate Agreements (BAAs).
Prepare and present quarterly compliance reports, risk assessments, and tracking dashboards directly to the CEO, Board of Directors, and Board Compliance Committees.