Pharmaceutical Strategies Group - PSG

Compliance

• Lead the development, implementation, and continuous improvement of a comprehensive healthcare privacy and compliance program.
• Ensure all organizational operations meet and exceed regulatory, governance, and client standards, including HIPAA, HITRUST, SOC2, and Medicare/Medicaid requirements.
• Proactively identify and mitigate compliance risks across the enterprise.
• Foster a culture of accountability, data security, and ethical practices throughout the organization.
• Collaborate with executive leadership, business unit leaders, IT and security teams, internal departments, employees, contractors, and external stakeholders to ensure effective compliance management.
• Promote compliance awareness and provide training to all relevant parties.
• Develop, update, and enforce policies, procedures, and monitoring activities to guarantee compliance with all relevant regulations and contractual obligations, proactively adapting to changes in the regulatory landscape.
• Oversee and continuously improve the auditing program, including planning audits, gathering and analyzing evidence, identifying deficiencies, and driving the implementation of corrective actions to strengthen compliance posture.
• Serve as a trusted advisor to business units, providing expert guidance on certifications, regulatory requirements, and best practices for healthcare data privacy and security.
• Chair and manage the compliance committee for relevant business units, facilitating cross-functional collaboration and ensuring alignment on compliance objectives and initiatives.
• Continuously monitor, assess, and document compliance risks across the organization, maintaining a dynamic risk register and prioritizing mitigation strategies to address vulnerabilities and emerging threats.
• Coordinate with internal teams to develop and execute comprehensive risk mitigation plans, ensuring timely resolution of compliance issues and fostering a proactive risk management culture.
• Develop, maintain, and execute an incident response plan for compliance breaches, collaborating with relevant teams to investigate, report, and remediate incidents in accordance with regulatory requirements.
• Design and deliver engaging training programs for employees and contractors, promoting compliance awareness, best practices, and the importance of data security throughout the organization.
• Maintain accurate, up-to-date records, reports, and documentation related to all compliance activities, preparing and submitting detailed compliance reports to senior management and regulatory authorities as required.
• Establish and track performance measures, goals, and reporting methodologies to evaluate and improve the effectiveness and productivity of compliance initiatives.
• Collaborate with business units to ensure business continuity planning is fully aligned with compliance and regulatory requirements, supporting organizational resilience and preparedness.
• Lead the timely and thorough completion of security risk assessments for current and prospective clients, ensuring all client engagements adhere to the highest standards of privacy and compliance.

Senior Manager, Healthcare Privacy and Compliance