Sr. Director Healthcare Compliance

SelectQuote, Inc. • Overland Park, KS

6d • Onsite

About The Position

The Sr. Director, Healthcare & Data Privacy Compliance is a leadership role, reporting to the Compliance & Risk Officer, responsible for the strategic vision, oversight, and operational execution of the organization's healthcare compliance and data privacy assurance programs. This position serves as the Company’s designated HIPAA Privacy Officer and leads the strategy to safeguard information assets, ensure regulatory compliance, and foster an enterprise-wide culture of data privacy. This role bridges healthcare operations (such as pharmacy and telehealth) with data security, legal, and executive leadership to ensure compliance readiness across state and federal regulations, technical security standards, and operational workflows.

Requirements

• Bachelor of Science in Healthcare Administration or a related business field required.
• 10-15 years in a compliance/regulatory role supporting business operations.
• Experience working with federal health care agencies and regulators, HIPAA, Anti-kickback and Stark laws.
• Required Healthcare/Privacy Certifications (at least one): CHPC, CHC, or equivalent.
• Strategic, results-driven leadership with high ownership and accountability.
• Strong cross-functional collaboration and relationship-building skills across reporting chains.
• Excellent oral, written, and executive presentation communication skills.
• Expert knowledge of business operational workflows, managing consumer healthcare data and technology infrastructure.
• Ability to handle complex problem-solving and manage multiple high-priority, concurrent projects under tight deadlines.

Nice To Haves

• Master’s degree in a related business or healthcare field preferred.

Responsibilities

• Manage and lead the healthcare compliance program, guiding long-term goals, tactics, and risk mitigation strategies.
• Create and update written policies and procedures accessible to all associates, detailing the implementation and operation of the compliance program.
• Lead the research and response to reports of complaints, suspected non-compliance, and audits, including record maintenance and assisting investigations.
• Conduct annual audits, security assessments, and required attestations for healthcare business units.
• Analyze and adapt to current federal and state healthcare laws impacting business operations (e.g., HIPAA, Anti-Kickback Statute, Stark Law, False Claims Act).
• Knowledge of current federal and state laws impacting program operations. Analyze and prepare written communications regarding these laws for affected business areas.
• Act as the designated HIPAA Privacy Officer.
• Coordinate regulatory contracting with healthcare service providers, partners, and business owners and maintain up-to-date Business Associate Agreements (BAAs).
• Develop, distribute, or post an NPP that explains patients' rights regarding their PHI and the organization's privacy practices. Ensure the NPP is updated to reflect changes in regulatory requirements or procedures.
• Coordinate and track institution-wide monitoring of healthcare data management compliance.
• Implement a process for receiving, documenting, tracking, investigating, and acting on all complaints concerning breaches in privacy policies and procedures.
• Ensure sales and marketing practices are compliant.
• Provide subject matter expertise for key cybersecurity compliance initiatives, including HITRUST certification, Sarbanes-Oxley (SOX) ITGCs, and CCPA compliance.
• Evaluate and monitor third-party vendor risk and cybersecurity postures in coordination with IT, Legal, and Risk Management.
• Strengthen and manage the cookie management program and related compliance.
• Partner with the Compliance Officer to facilitate and perform annual institution-wide risk assessments to identify privacy, compliance, and cybersecurity vulnerabilities.
• Partner with the Data Security officer to oversee the incident response plan for cybersecurity breaches and privacy violations, ensuring swift investigation, remediation, corrective action plans (CAPs), and mandatory regulatory reporting.
• Assist executive leadership in responding to reports of suspected non-compliance and enforcing disciplinary sanctions when violations occur.
• Develop a solid associate education and training program that covers healthcare compliance issues such as fraud, waste and abuse.
• Maintain confidential, anonymous reporting hotlines/channels for compliance concerns.
• Report compliance findings, audit results, and governance metrics directly to senior management and regulatory bodies.

Benefits

• Competitive Medical, Dental, and Vision Insurance
• HSA/FSA
• Voluntary Hospital Indemnity, Critical Illness, Accident Insurance, and Short Term Disability
• Voluntary Life Insurance for Self, Spouse and Dependent
• Company-paid Basic Life Insurance and Long Term Disability
• Retirement plan and Employer match contribution with Profit Share
• Tuition Reimbursement program
• Company perks and Discount program
• Engaging Wellness and Financial Education Resources
• Employee Assistance Program
• Incentive Plans

What This Job Offers

• Job Type: Full-time
• Career Level: Director