General Counsel Chief Compliance and Privacy Officer

Overview

This role is responsible for building, implementing, and maintaining strategic legal, compliance, and privacy programs that support consistent and effective compliance and/or privacy practices, reduce legal risk, and ensure organizational operations meet legal obligations.

Responsibilities

• Lead and oversee the development, implementation, and ongoing monitoring of the organization’s legal, compliance, and privacy programs.
• Ensure compliance and adherence to applicable laws and regulations and accreditation standards.
• Minimize legal risk across operational activities.
• Ensure the confidentiality of protected health information (“PHI”).
• Promote a culture of compliance and adherence to applicable laws, regulations, and accreditation standards throughout the organization.
• Review documents, agreements, and contractual obligations, including terms, while serving as a key resource to advise on risk mitigation and legal, compliance, and/or privacy matters.
• Analyze client, vendor, and other third-party requests for disclosure of PHI; identify and issue appropriate privacy-related agreements (e.g., Business Associate Agreement, Non-Disclosure Agreement). Review, draft, and negotiate privacy-related agreements.
• Maintain an agreement database.
• Develop, implement, review, update, and maintain privacy-focused policies, procedures, processes, and programs.
• Maintain current knowledge of applicable privacy laws and regulations; implement changes to privacy programs as appropriate.
• Advise on applicable legal, regulatory, and compliance requirements related to privacy.
• Develop, implement, review, update, and maintain compliance-focused policies, procedures, processes, and programs, including those needed to demonstrate a robust compliance program to accrediting agencies.
• Maintain current knowledge of applicable laws, regulations, and accreditation standards; implement changes to compliance programs as appropriate.
• Advise on applicable legal, regulatory, compliance, and accreditation requirements to ensure adherence.
• Manage the development, delivery, and completion of legal, compliance, and/or privacy trainings.
• Review and update training materials on legal, compliance, accreditation, and/or privacy topics.
• Create and deliver specialized educational programs for key roles and responsibilities to mitigate risk arising from legal, privacy, compliance, or accreditation obligations.
• Establish and chair a Compliance Oversight Committee.
• Provide regular reports detailing privacy or compliance initiatives and the status of operational activity to senior management.
• Identify and present changes to legal, privacy, accreditation, or compliance obligations and matters of significance or urgency to senior management.
• Recommend improvements to policies, procedures, processes, and programs to support risk mitigation and adherence to legal, compliance, accreditation, and/or privacy obligations.
• Develop and document an annual work plan for the Committee’s initiatives and activities.
• Coordinate and review all workflow to and through external legal counsel across all areas, including collaboration with Human Resources.
• Manage outside counsel relationships, including billing.
• Conduct and/or participate in annual privacy, security, and compliance risk analysis and ongoing monitoring activities.
• Participate in internal and external audits related to privacy, security, accreditation, and compliance practices.
• Oversee implementation of corrective actions.
• Receive, track, document, investigate (including completion of a risk assessment), and take action on all reports of:
  • potential privacy-related incidents or complaints, or
  • compliance-related incidents or complaints, including those related to accreditation.
• Direct the process for reporting incidents as required by applicable legal, accreditation, or contractual obligations.
• Review, draft, and negotiate all contractual agreements.
• Serve as a key resource to advise on internal organizational legal, compliance, accreditation, or privacy matters.
• Perform other duties and projects requiring legal, compliance, accreditation, or privacy expertise as assigned.

Requirements

• Bachelor’s degree and JD required.
• Admission to the Bar in one or more states where the organization does business.
• 7 or more years of experience in health care privacy, legal, and compliance matters required.

Preferred Qualifications

• CIPP, CIPM, CHC, CHPC credential a plus.
• Experience with Utilization Review Accreditation Commission matters a plus.
• Experience with Service Organization Controls reporting and audits a plus.

Compensation & Benefits

Benefits package includes:

• Medical, Dental and Vision and Prescription Drug Coverage
• Fitness Reimbursement Benefit
• Employee Assistance Program
• Flexible Spending Account & Health Savings Account
• 401(k) and Quarterly Bonuses
• Generous Paid-Time Off & Volunteering Opportunities
• Educational Assistance & Professional Development Opportunities

Location

Westborough headquarters (onsite amenities include an onsite café, walking trails in the office park, and campus gyms).