Overview
This role involves serving as Senior Legal Counsel & HIPAA Compliance Officer for a health and wellness organization focused on supporting seniors and their caregivers. The position is responsible for overseeing HIPAA compliance, safeguarding patient health information, conducting risk assessments, investigating breaches, and educating staff on privacy practices. Additionally, the role includes managing a broad range of legal matters related to healthcare regulations, contract negotiation, and privacy policies.
This is a remote, work-from-home position reporting to the Chief Regulatory & Compliance Officer.
Responsibilities
- Develop, review, update, and communicate HIPAA compliance policies, procedures, and operational standards.
- Conduct regular HIPAA audits, risk assessments, and compliance reviews to identify vulnerabilities and implement corrective actions.
- Implement and oversee technical, physical, and administrative safeguards to mitigate regulatory risks.
- Monitor ongoing compliance activities and support programs to ensure adherence to HIPAA and legal standards.
- Investigate suspected or reported HIPAA breaches and manage required reporting per federal and state laws.
- Develop, maintain, and deliver comprehensive HIPAA training programs for staff.
- Review and manage contracts with third-party vendors accessing protected health information (PHI) to ensure HIPAA compliance.
- Draft, review, and negotiate contracts and legal documents with third parties.
- Oversee litigation, dispute resolution, and coordinate with external counsel as needed.
- Collaborate with healthcare providers, IT staff, legal counsel, and senior management on HIPAA compliance strategies.
- Provide strategic legal advice to executive leadership and departments to support business objectives.
- Coordinate with other legal counsel to ensure alignment on high-risk legal matters.
- Advise on and ensure compliance with applicable local, state, and federal regulations.
- Manage consumer-focused policies and agreements including Privacy Policy, CCPA, DOPPA, and Terms of Use.
- Monitor legislative and regulatory changes and assess their impact on organizational policies and operations.
Qualifications
- Juris Doctor (JD) degree.
- Licensed to practice law in good standing in one or more states.
- Minimum of 10 years combined experience in law firm and/or in-house counsel roles.
- Prior experience as a HIPAA Compliance Officer.
- Deep knowledge of HIPAA regulations including Privacy, Security, and Enforcement Rules.
- Strong analytical and problem-solving skills.
- Excellent communication and interpersonal skills for training and collaboration.
Preferred Qualifications
- Experience implementing a HIPAA compliance program from inception.
- Familiarity with ISO 13485:2016 Medical Devices and 21 CFR 820 regulations.
- Experience with general healthcare compliance programs.
- Self-starter with strong organizational and time management skills.
- Ability to work collaboratively in a team-oriented environment.
- Demonstrated discretion, sound decision-making, and confidentiality.
- Willingness to work flexible hours.
- Proficiency with MS Office and virtual communication tools (e.g., MS Teams).
Physical Demands
- Sitting, standing, and walking for 95-100% of the time.
- Keyboarding for 40-60% of the time.
- Close vision required for viewing computer monitors, tablets, and phone screens 95-100% of the time.
Work Environment
- Fully remote, work-from-home setting.
Compensation & Benefits
- Salary range: $175,000 to $187,000 per year.
- Bonus: 18% annual bonus based on market analysis and internal equity.
- Final compensation depends on qualifications, experience, and business needs.
- Comprehensive benefits package available.
Additional Information
- The employer is an equal opportunity organization committed to diversity and inclusion.
- Employment decisions are based on business needs, job requirements, and individual qualifications without regard to legally protected characteristics.
- Candidates must be authorized to work in the U.S. without current or future visa sponsorship.
This description outlines the general nature and level of work but is not exhaustive of all duties and qualifications required.