VP, Compliance

About us

LifeMD is an emerging leader in technology driven healthcare. We’re applying our direct-to-consumer marketing expertise to make access to quality care and medication convenient, cost-effective, and simple. Our brands are intensely focused on our patients, constantly striving to deliver a better end-to-end healthcare experience through technology. Our mission is to improve the health and happiness of our patients through telehealth.

About the role

The VP of Compliance will be a member of the LifeMD Compliance and Legal team and will play a major role in developing, implementing, monitoring, reviewing, and administering a broad array of LifeMD compliance program initiatives, including its privacy program and its HIPAA compliance program. This position reports directly to the Chief Compliance Officer.

The VP of Compliance will be a team lead on the development, implementation, monitoring, review, and administration of an effective compliance program, with a particular focus on healthcare regulatory issues, including HIPAA. The VP of Compliance will initially focus on ensuring compliance with applicable federal and state regulations, as well as general industry standards, related to data security, privacy, and health information. In so doing, the VP of Compliance will provide subject matter expertise on privacy, data protection, data governance, and HIPAA, and will provide general support on an array of other compliance matters as they arise. While the successful candidate will have significant healthcare privacy compliance expertise, the candidate must also be capable of tackling emerging regulatory issues and eager to learn about areas with which they are less familiar. The VP of Compliance will take the lead in drafting and implementing policies and procedures, monitoring regulatory developments, and developing employee compliance trainings. The VP of Compliance will also manage incident response, lead data security initiatives, and coordinate third-party risk management, in partnership with Security, Technology, Legal, and other stakeholders. In addition, the VP of Compliance will play an important role in a broad array of other compliance initiatives, including matters pertaining to clinical operations, care reimbursement, health plan enrollment, and compliance with federal Fraud and Abuse regulations.

Responsibilities

• Plan, develop, and implement company compliance initiatives, with a focus on HIPAA and data governance, partnering with Security, Technology, Legal, and other stakeholders. This position will manage individual project priorities, deadlines, and deliverables
• Work closely with stakeholders to identify gaps in implementation of compliance policies and procedures across regions and business units
• Maintain visibility into relevant regulatory developments, including developments in federal, state, and international laws, rules, and regulations that impact LifeMD’s business from the perspective of regulatory compliance
• Review, revise, develop, implement, and/or administer written policies, procedures, and guidelines designed to ensure operational processes and practices comply with applicable laws and regulations
• Lead internal evaluation of data practices and collaborate with staff to ensure data use is compliant with relevant agreements, including business associate agreements, and other contractual restrictions, as well as applicable laws, regulations, and policies
• Collaborate with Procurement, IT, Security, and other departments in the review and negotiation of business associate agreements, data protection addenda, and other applicable documents as they concern HIPAA and privacy issues
• Lead and/or participate in audits related to data practices and other compliance issues, including risk assessments, gap analyses, and corrective action plans
• Manage and oversee compliance-related investigations and complaints and their resolution, in collaboration with other leaders, team members, and counsel, as appropriate
• Prepare and review compliance-related tracking reports, including those related to data incidents, customer complaints, business practices, and data analytics, to identify opportunities for enhancement of procedures and practices
• Oversee development and enhancement of company employee training materials with a particular focus on data governance and privacy issues, including HIPAA
• Oversee the breach notification process, including any follow-up with affected individuals and external agency investigations, including drafting responses and remediation and implementation of corrective action
• Maintain knowledge of applicable rules and regulations (including HIPAA, HITECH, CCPA, GDPR, state privacy laws, and FTC regulations) that impact the organization and act as a subject mat