Manager, Enterprise Risk Management - Compliance

HealthRIGHT 360•San Francisco, CA

14d

About The Position

HealthRIGHT 360, a nonprofit organization and a family of programs, is committed to providing accessible and comprehensive healthcare services to vulnerable populations. Our mission is to tackle systemic barriers to healthcare and promote health equity for all. We offer a wide range of services, including mental health care, residential and outpatient substance use treatment, and primary health services. Additionally, we provide transitional support for individuals re-entering the community after involvement in the criminal justice system. By integrating physical and behavioral health, we empower individuals to overcome challenges by addressing social determinants of health, fostering resilience, and facilitating recovery. The Compliance Department at HealthRIGHT 360 supports the organization’s mission by promoting a culture of ethics, accountability, and regulatory integrity across all programs. The team ensures compliance with federal, state, and local laws, as well as contractual and accreditation standards, through ongoing monitoring, training, internal audits, policy guidance, and incident oversight. By partnering with staff and leadership, the department helps safeguard client rights, minimize risk, and ensure that services are delivered in accordance with the highest standards of quality and transparency. The Manager, Enterprise Risk Management, plays a critical operational and strategic role in protecting HealthRIGHT 360 by proactively identifying, managing, and mitigating enterprise risk. Reporting to the Deputy Chief of Compliance, this position serves as a key liaison among Compliance, executive leadership, legal counsel, insurance carriers, and internal stakeholders. The Manager leads day-to-day enterprise risk management activities and supports broader compliance initiatives in alignment with the organization’s Corporate Compliance Plan and Risk Management framework. This role requires strong judgment, discretion, and organizational leadership, with a focus on safeguarding client care, workforce wellbeing, and organizational sustainability.

Requirements

Bachelor’s degree (BA/BS) or equivalent combination of education and experience.
Minimum of 5 years of progressively responsible experience in managing legal risk, compliance, legal operations, healthcare administration, or a related field.

Nice To Haves

Experience in healthcare, behavioral health, or regulated nonprofit environments.
Direct experience managing claims, subpoenas, insurance coordination, or legal matters.
Experience administering and improving compliance or risk management databases/systems.
Familiarity with enterprise risk frameworks, audits, and compliance committees

Responsibilities

Claims Management
Serve as the primary point of contact for non-workplace claims and potential claims against HealthRIGHT 360.
Receive, review, triage, and track notices of claims, demands, incidents, or potential litigation.
Ensure timely reporting of claims to insurance carriers in accordance with policy requirements.
Enter, maintain, and update claims information within the Risk Registry module of Compliatric.
Coordinate and maintain ongoing communication with insurance carriers, brokers, and carrier-designated legal counsel.
Prepare and provide clear, timely communications and status updates to the Deputy Chief of Compliance and executive leadership, as appropriate.
Maintain confidentiality and exercise sound judgment when handling sensitive or high-risk matters.
Subpoena and Legal Request Management
Manage and coordinate responses to subpoenas and legal requests for information that fall outside of routine medical records requests.
Work collaboratively with internal stakeholders, legal counsel, and leadership to gather responsive materials and ensure timely, accurate production.
Support, prepare, and brief HealthRIGHT 360 staff for depositions, hearings, or court appearances, in coordination with counsel.
Travel, as needed, to accompany staff to legal proceedings or hearings.
Track subpoenas and related matters within the Risk Registry to ensure documentation, consistency, and follow-through.
Continually assess, improve and implement database processes for effectively managing subpoenas and legal requests.
Risk Registry & Compliance Systems Management
Serve as the primary administrator for the Risk Registry module within Compliatric.
Ensure daily, accurate, and consistent entry, maintenance, and validation of enterprise risk data.
Design, refine, and improve database structure, fields, workflows, and reporting to enhance usability, data integrity, and decision-making value.
Develop and generate meaningful reports, dashboards, and trend analyses to support leadership, CRMC review, and risk mitigation planning.
Maintain strong documentation standards to support audits, regulatory inquiries, and internal reviews.
Compliance & Risk Management Committee (CRMC) Support
Coordinate and support the operational work of the Compliance & Risk Management Committee in alignment with the CRMC Charter and Risk Management Program Manual.
Prepare and compile meeting materials, including risk reports, Key Performance Indicators (KPIs), and supporting documentation.
Ensure timely collection, tracking, and reporting of KPIs and risk metrics.
Draft comprehensive meeting minutes, action items, and next steps.
Track follow-up actions, sub-workgroup activities, and assigned responsibilities to ensure accountability and completion.
Records Retention & Information Governance
Lead and coordinate enterprise-wide efforts related to legal and regulatory record retention requirements.
Collaborate with internal stakeholders to review, update, and implement document retention schedules and best practices.
Serve as the primary Compliance lead for offsite records storage, including oversight of the Iron Mountain contract.
Ensure offsite storage, retrieval, and destruction processes meet legal, regulatory, and compliance requirements.
Monitor vendor performance, costs, and fiscal efficiency related to records management services.
Support secure and compliant destruction of records that have met retention requirements.
Enterprise Risk Reduction & Special Projects
Provide direct support to the Deputy Chief of Compliance and Managing Director of Compliance Administration on projects designed to reduce enterprise risk.
Assist with audits, investigations, risk assessments, and corrective action planning, as assigned.
Contribute to the development, refinement, and implementation of compliance and risk management policies, procedures, training, and tools.
Promote a culture of risk awareness, accountability, and proactive problem-solving across the organization.