Start a New Career with Us

We are seeking a skilled and detail-oriented person to join our team and grow into our Compliance Officer position. This role will be crucial in ensuring our organization’s adherence to regulatory frameworks, specifically focusing on the Health Insurance Portability and Accountability Act (HIPAA) and Service Organization Control 2 (SOC 2) guidelines. The ideal candidate will possess knowledge of these compliance standards, exceptional organizational skills, and the ability to develop and implement effective compliance programs. As you are trained and acclimated to our business, you will take over the following responsibilities:

Job Responsibilities:

1. HIPAA and SOC 2 Compliance Oversight:
   

   • Develop, implement, and maintain comprehensive compliance programs for both HIPAA and SOC 2 guidelines.
   • Stay abreast of changes in regulations, updating policies and procedures accordingly to ensure continuous compliance.
2. Risk Assessment and Mitigation:
   

   • Conduct regular risk assessments related to HIPAA and SOC 2 compliance.
   • Develop and implement strategies to mitigate identified risks and ensure a proactive approach to compliance.
3. Policy and Procedure Development:
   

   • Create and maintain robust policies and procedures that align with the requirements of HIPAA and SOC 2 standards.
   • Ensure these policies are communicated effectively across the organization.
4. Training and Awareness:
   

   • Design and deliver training programs to educate employees on HIPAA and SOC 2 compliance requirements.
   • Foster a culture of awareness and accountability throughout the organization.
5. Audit and Monitoring:
   

   • Coordinate and oversee internal and external audits to assess compliance with HIPAA and SOC 2 standards.
   • Develop and implement monitoring mechanisms to track compliance on an ongoing basis.
6. Incident Response:
   

   • Establish and manage an incident response plan for potential breaches or incidents related to HIPAA and SOC 2 compliance.
   • Lead investigations and implement corrective actions in the event of non-compliance.
7. Vendor Management:
   

   • Evaluate and monitor third-party vendors for compliance with HIPAA and SOC 2 standards.
   • Collaborate with vendors to address any identified compliance gaps.
8. Documentation and Reporting:
   

   • Maintain accurate and up-to-date documentation related to compliance activities.
   • Generate regular reports for leadership, summarizing the status of HIPAA and SOC 2 compliance initiatives.

Qualifications:

• Bachelor’s degree in Information Technology or equivalent work experience.
• Aware of HIPAA and SOC 2 regulations and standards.
• Strong analytical and problem-solving skills.
• Excellent communication and interpersonal skills.

Preferred Qualifications:

• Additional knowledge/experience in SOC 2/HIPAA or other security standards.
• Relevant certifications (e.g., Certified in Healthcare Compliance – CHC, Certified Information Systems Security Professional – CISSP)