AVP Compliance and Risk Management

Thundermist's Mission - To improve the health of our patients and communities by delivering exceptional health care, removing barriers to that care, and advancing healthy lifestyles.


Please note, effective September 1,2021, all Thundermist employees are required to have an initial dose of vaccine to prevent Covid-19. Effective October 1, 2021, all employees of RI licensed health care facilities must be fully vaccinated against Covid-19. Employees may be deemed exempt from this requirement based on documentation from their health care provider.


Thundermist Community Health Center is a Federally Qualified Health Centers (FQHCs) dedicated to serving the most vulnerable populations in Rhode Island. We serve 1 in every 5 RI residents with high-quality and easily accessible care. Compliance and risk management are crucial to ensure patient safety, operational efficiency, and adherence to regulations.

Compliance involves meeting all applicable rules and standards, while risk management focuses on identifying, analyzing, and mitigating potential threats to compliance. Together, these practices and controls enable Thundermist Health Center to operate effectively and provide quality care to RI’s underserved communities. By preemptively addressing potential operational risks and adhering to regulations, this role will ensure that Thundermist Health Center can protect our patients, staff, and organization.

The Role: The AVP (Assistant Vice President), Compliance and Risk Management will ensure that Thundermist Community Health Center operates in compliance with laws, regulations, and rules governing business and clinic operations. They regularly assess risks, develop protection strategies, conduct internal audits, and provide guidance on compliance requirements. They ensure compliance with applicable laws and regulations, monitor compliance developments, and provide guidance to senior management. The role also involves collaborating with Board Members, senior leaders and team members when evaluating business risks, developing mitigation strategies, and contributing to risk management policies and procedures. A strong AVP of Compliance and Risk Management is well-versed in legal guidelines and corporate governance.
Position Summary: This role is responsible for proactive risk identification, evaluation, mitigation coordination and implementation of corrective action related to Thundermist Community Health Center risk, regulation, and compliance matters. The role provides risk management and compliance education and intervention to promote a safe work environment. The role develops and directs company-wide risk and compliance programs to ensure all potential risk situations are responsibly managed.

Areas of Responsibility:
• Risk Assessment & Management. Identify and assess potential risks and vulnerabilities within the organization’s operations, processes and strategies.
• Regulatory Compliance. Ensure that the organization adheres to all applicable legal and regulatory requirements, including HIPAA, OSHA, and HRSA requirements. Serve as the primary point of contact for regulatory agencies and external auditors during compliance-related reviews and audits.
• Internal Auditing and Monitoring. Conduct internal audits to evaluate compliance with policies and regulations.
• Financial Compliance. Ensure financial transactions and reporting adhere to accounting standards and regulations.
• Strategic Planning. Collaborate with senior management to integrate risk management and compliance into strategic planning and decision-making processes.
• Crisis Management. Develop crisis response plans to address unexpected events.
• Environmental Compliance. Conduct regular audits and assessment of operations to ensure compliance with environmental safety and community relations regulations.
• Manage Complaints and Violations: Manage the compliance hotline and investigate compliance-related complaints, concerns, and potential violations, recommending appropriate corrective actions when necessary.
• Manage HRSA Site Visits: Oversee the preparation for HRSA Operational Site Visits, including the review of required documentation, policies, and procedures, ensuring all necessary records are ready and available for HRSA reviewers. Ensure that any follow-up actions required after a HRSA site visit are completed and that all necessary reporting and evidence of compliance is provided.

Key Compliance and Risk Management Duties:
• HIPAA Compliance: FQHCs must adhere to the Health Insurance Portability and Accountability Act (HIPAA), including the Security Rule. This involves conducting security risk analyses, implementing risk management strategies, and providing staff training on security awareness.
• Regulatory Compliance: Thundermist Community Health Center must comply with a wide range of fede