Apply on Employer Site

EPIC Insurance Brokers & Consultants · 1 day ago

Senior Manager, Healthcare Privacy and Compliance

United States

Full-time

Remote

Mid, Senior Level

$120K/yr - $150K/yr

5+ years exp

EPIC Insurance Brokers & Consultants is one of the fastest-growing firms in the insurance industry, seeking a Senior Manager for their Healthcare Privacy and Compliance program. This role is responsible for leading the organization's healthcare privacy initiatives, ensuring compliance with regulatory standards, and fostering a culture of accountability and data security.

ConsultingFinancial ServicesInsuranceProperty InsuranceRetail

Responsibilities

Lead the design, implementation, and ongoing enhancement of a comprehensive healthcare privacy and compliance program, ensuring all divisions consistently meet or exceed regulatory, governance, and client standards, including HIPAA, HITRUST, SOC2, and Medicare/Medicaid requirements

Develop, update, and enforce policies, procedures, and monitoring activities to guarantee compliance with all relevant regulations and contractual obligations, proactively adapting to changes in the regulatory landscape

Oversee and continuously improve the auditing program, including planning audits, gathering and analyzing evidence, identifying deficiencies, and driving the implementation of corrective actions to strengthen compliance posture

Serve as a trusted advisor to business units, providing expert guidance on certifications, regulatory requirements, and best practices for healthcare data privacy and security

Chair and manage the compliance committee for relevant business units, facilitating cross-functional collaboration and ensuring alignment on compliance objectives and initiatives

Continuously monitor, assess, and document compliance risks across the organization, maintaining a dynamic risk register and prioritizing mitigation strategies to address vulnerabilities and emerging threats

Coordinate with internal teams to develop and execute comprehensive risk mitigation plans, ensuring timely resolution of compliance issues and fostering a proactive risk management culture

Develop, maintain, and execute an incident response plan for compliance breaches, collaborating with relevant teams to investigate, report, and remediate incidents in accordance with regulatory requirements

Design and deliver engaging training programs for employees and contractors, promoting compliance awareness, best practices, and the importance of data security throughout the organization

Maintain accurate, up-to-date records, reports, and documentation related to all compliance activities, preparing and submitting detailed compliance reports to senior management and regulatory authorities as required

Establish and track performance measures, goals, and reporting methodologies to evaluate and improve the effectiveness and productivity of compliance initiatives

Collaborate with business units to ensure business continuity planning is fully aligned with compliance and regulatory requirements, supporting organizational resilience and preparedness

Lead the timely and thorough completion of security risk assessments for current and prospective clients, ensuring all client engagements adhere to the highest standards of privacy and compliance

Qualification

Healthcare data complianceHIPAAHITRUSTSOC2Regulatory standards knowledgeAnalytical skillsIT security knowledgeCommunication skillsAttention to detailCollaboration skillsSelf-motivated

Required

Candidate must have a minimum of 5 years of experience leading healthcare data compliance initiatives with multiple cross functional stakeholders - Deep understanding of implementing and assessing controls in complex environments

Strong knowledge of HIPAA, HITRUST, SOC2 and other relevant regulatory standards

Strong written and verbal communication skills

Strong analytical, problem-solving, and communication skills

Exceptional attention to detail and a commitment to upholding the highest ethical standards

Ability to collaborate and coordinate effectively with cross-functional teams and communicate compliance requirements clearly

Diverse security and IT background with knowledge in multiple areas including policy, IT service management, networking, infrastructure, application development and information security-related standards and initiatives

Self-motivated; able to work with minimal supervision

Benefits

Generous Paid Time off

Managed PTO for salaried/exempt employees (personal time off without accruals or caps); 22 PTO days starting out for hourly/non-exempt employees; 12 company-observed paid holidays; 4 early-close days

Generous leave time options: Paid parental leave, pregnancy disability and bonding leave, and organ donor/bone marrow donor leave

Generous employee referral bonus program of $1,500 per hired referral

Employee recognition programs for demonstrating EPIC’s values plus additional employee recognition awards and programs (and trips!)

Employee Resource Groups: Women’s Coalition, EPIC Veterans Group

Professional growth & development: Mentorship Program, Tuition Reimbursement Program, Leadership Development

Unique benefits such as Pet Insurance, Identity Theft & Fraud Protection Coverage, Legal Planning, Family Planning, and Menopause & Midlife Support

Additional benefits include (but are not limited to): 401(k) matching, medical insurance, dental insurance, vision insurance, and wellness & employee assistance programs

50/50 Work Culture: EPIC fosters a 50/50 culture between producers and the rest of the business, supporting collaboration, teamwork, and an inclusive work environment.

EPIC Gives Back – Some of our charitable efforts include Donation Connection, Employee Assistance Fund, and People First Foundation

Company

EPIC Insurance Brokers & Consultants

We are a unique and innovative retail risk management and employee benefits insurance brokerage and consulting firm founded in San Francisco, California, in 2007 with offices and leadership across the country.

Founded in 2007

San Francisco, California, USA

1001-5000 employees