Senior Director of Compliance and Risk

The House of The Good Shepherd•City of Utica, NY

1d•$105,000 - $135,000•Onsite

About The Position

The Senior Director of Compliance and Risk is The House of the Good Shepherd’s designated Compliance Officer and Privacy Officer and leads the Compliance, Risk and Quality department. Reporting directly to the COO, with regular reports to the CEO and Board of Directors, the role builds and oversees a compliance program that meets federal and New York State requirements, accreditation standards, and organizational policies. The position oversees the annual compliance work plan, code of conduct, policies, training, auditing, monitoring, confidential reporting, non-retaliation, investigations, corrective action, and protection of client health information. The role also sets the direction for risk management and quality improvement, advises senior leadership on regulatory and emerging risks, and represents the agency with regulators, accreditors, legal counsel, and insurers. The Senior Director establishes department priorities, approves methodologies and reports, allocates resources, and supervises the Director of Compliance & Risk. The position is based at the Lomond Business Office in Utica, New York, and involves occasional travel to agency locations and external meetings or training.

Requirements

Bachelor’s degree in compliance, law, health care administration, human services, business, public administration, or a related field.
At least seven years of progressively responsible experience in compliance, quality, privacy, audit, risk, or related work.
At least three years of leadership or management experience.
Demonstrated experience conducting or overseeing investigations and communicating findings to executive or governing-body audiences.
Working knowledge of applicable federal and New York State requirements, accreditation expectations, and effective compliance program practices.
Valid driver’s license and ability to travel to agency locations and external meetings or training as needed.

Nice To Haves

Master’s degree.
Experience in nonprofit child welfare or behavioral health.
Professional certification in compliance, privacy, audit, risk, or quality.

Responsibilities

Serve as the designated Compliance Officer, with sufficient authority, independence, and access to organizational records and leaders to administer an effective compliance program.
Develop, implement, and periodically revise the compliance program, annual compliance work plan, code of conduct, and related policies based on regulatory requirements and organizational risk.
Provide the CEO and Board with timely reports on compliance program effectiveness, material violations, trends, corrective actions, unresolved risks, and resource needs.
Advise senior leadership on legal, regulatory, accreditation, contractual, privacy, and quality requirements affecting agency operations.
Oversee confidential reporting, non-retaliation, investigations, corrective action, auditing, monitoring, training, and responses to detected noncompliance.
Direct the agency’s performance and quality improvement framework, including outcome measurement, utilization review, program evaluation, satisfaction surveys, and use of findings for measurable improvement.
Oversee risk-based audits, regulatory examinations, accreditation activities, internal investigations, incident trend review, and monitoring of corrective action plans.
Serve as the designated Privacy Officer and maintain a privacy program governing the use, access, disclosure, retention, and protection of confidential and protected health information across all media.
Oversee privacy risk assessments, complaint and incident investigations, breach risk determinations, required notifications, mitigation, sanctions coordination, and documentation.
Partner with the Information Security Officer and information technology leaders to align privacy and security governance, investigate inappropriate access or disclosure, and monitor recurring patterns.
Ensure privacy notices, consent and authorization forms, release-of-information practices, business associate agreements, policies, procedures, and workforce training reflect current requirements.
Represent the agency with regulators, accreditors, legal counsel, insurers, and other external parties on compliance, privacy, quality, audit, and risk matters.
Establish department priorities, approve methodologies and reports, allocate resources, and supervise the Director of Compliance & Risk through regular performance and development activities.
Promote a culture in which staff understand their responsibilities, raise concerns without fear of retaliation, and use data and learning to strengthen services.
Lead or sponsor agency committees and special initiatives assigned by the CEO and perform other duties consistent with the scope of the position.
Perform other related duties as assigned.