Medical Records and Compliance Manager (Program Manager II, Grade N25)

Montgomery County•401 Hungerford Dr Rockville MD 20850 USA, MD

About The Position

Montgomery County’s Department of Health and Human Services is seeking a Program Manager to support medical records, medical credentialing, provider enrollment, and compliance. The position provides centralized oversight of medical records, privacy, and formal records request processes, ensuring sensitive information is managed, protected, and released in accordance with applicable federal, state, and County requirements. The role supervises program staff and serves as a departmental subject-matter resource for medical records and related compliance matters. The manager coordinates Department-wide provider credentialing, recredentialing, and enrollment, including verifying and maintaining qualifications and enrollment information, monitoring licenses and certifications, conducting required exclusion and sanction screenings, and supporting enrollment and revalidation with applicable healthcare programs and payers. The role also oversees medical records and other formal records requests, including Maryland Public Information Act requests, subpoenas, legal and regulatory requests, and other authorized requests. Responsibilities include determining disclosure authority and deadlines, coordinating collection and review of responsive records, and ensuring appropriate redaction and protection of confidential information. The position develops and maintains policies, procedures, workflows, tracking systems, and internal controls; provides guidance on HIPAA, privacy, confidentiality, retention, documentation, and records release; and conducts compliance monitoring, audits, quality reviews, and staff training. It collaborates with program leadership, Legal, Privacy, IT, and other stakeholders, tracks performance and compliance trends, supports corrective actions and process improvements, and provides day-to-day operational supervision of assigned staff. The position may require travel between DHHS locations, clinics, meetings, and trainings, as well as some evening and weekend work. A background investigation and financial disclosure statement are required.

Requirements

At least five years of professional experience in medical records, medical credentialing, provider enrollment, and compliance.
Supervisory experience.
Graduation from an accredited college or university with a bachelor’s degree, or an equivalent combination of education and experience.
If required by the position assignment, possession and maintenance of a valid Class C or equivalent driver’s license from the applicant’s state of residence.

Nice To Haves

Experience managing medical records or confidential information, including knowledge and application of HIPAA, privacy, confidentiality, provider enrollment or medical credentialing, and records release requirements.
Experience reviewing and responding to public information requests, subpoenas, legal requests, regulatory requests, or other formal records requests, including disclosure decisions, redaction, and escalation.
Experience conducting compliance monitoring, audits, quality reviews, or investigations, and implementing corrective actions or process improvements.
Experience developing and delivering training on medical records, privacy, HIPAA, compliance, documentation, or other regulatory requirements.
Experience managing or improving records management or compliance programs, including developing policies, procedures, workflows, tracking mechanisms, or performance measures.
Experience collaborating with leadership, legal, Information Technology, clinical programs, or other stakeholders.
Current, recognized HIPAA, healthcare privacy, or healthcare compliance certification, such as HPOC, or another relevant professional certification.
Ten years of medical records, provider enrollment or medical credentialing, and privacy expertise.
Knowledge and experience handling MPIA requests, subpoenas, regulatory or legal requests, records review, redaction, and applicable deadlines.
Demonstrated ability to manage complex workflows and competing deadlines, develop policies and procedures, track performance, and collaborate effectively with legal, privacy, IT, clinical programs, leadership, and other stakeholders.

Responsibilities

Recognize records or requests requiring review by the Privacy Officer, legal counsel, or other specialists, and coordinate appropriate escalation.
Provide guidance on HIPAA, privacy and confidentiality, minimum necessary standards, records retention, documentation, and records release requirements.
Develop and conduct staff training on medical records, HIPAA/privacy, MPIA, records request processes, documentation, and related compliance requirements.
Develop and maintain policies, procedures, workflows, tracking systems, and internal controls for records management and compliance activities.
Conduct compliance monitoring, audits, and quality reviews, and assist with corrective actions and process improvements.
Collaborate with program leadership, Legal, Privacy, IT, and other stakeholders to address complex requests and compliance concerns.
Maintain tracking, reporting, and performance measures for deadlines, outstanding requests, compliance trends, and audit readiness.
Administer and coordinate Department-wide provider credentialing, recredentialing, and enrollment activities.
Verify and maintain provider qualifications and enrollment information; monitor licenses, certifications, and required exclusion and sanction screenings.
Support enrollment and revalidation with applicable federal, state, and commercial healthcare programs and payers.
Oversee and coordinate medical records and other formal records requests, including MPIA requests, subpoenas, legal requests, licensing and regulatory requests, and other authorized information requests.
Review requests to determine scope, disclosure authority, required documentation, applicable deadlines, and responsive information.
Communicate with requesters and internal programs to obtain clarification, authorizations, or additional information needed to process requests.
Coordinate collection, review, redaction, and release of responsive records while safeguarding confidential or protected information.
Supervise assigned staff, including work assignments, performance, training, and day-to-day operational support.
Serve as a departmental subject-matter resource and point of contact for medical records and records-related compliance matters.
Perform other job-related duties as assigned.