Chief Compliance Officer

Chief Compliance Officer (CCO) @ Midi Health

📍 Remote (US-Based) 

We’re looking for a mission-driven Chief Compliance Officer (CCO) to lead our regulatory, privacy, and healthcare compliance strategy as we scale a nationwide virtual care model. This role is ideal for a seasoned leader who has built and led compliance programs at high-growth healthcare organizations. You’ll build and evolve a compliance program that enables innovation while upholding the highest standards of patient safety, data privacy, and regulatory integrity.

What You’ll Do

• Lead the strategy, improvement, and execution of our enterprise compliance program
• Serve as the executive advisor on regulatory risk, compliance and credentialing operations, privacy operations and audit readiness
• Oversee compliance with state and federal healthcare laws including HIPAA, HITECH, E/M and prescribing rules, telehealth regulations, Anti-Kickback Statute (AKS), Stark Law, and the False Claims Act
• Build and maintain a URAC-compliant telehealth compliance and quality program and NCQA credentialing program, including drafting and editing policies, monitoring, reporting and corrective action frameworks
• Oversee multi-state telehealth compliance, provider licensure rules, credentialing standards, prescribing regulations, and payor compliance policies
• Direct compliance audits and manage responses to regulatory agencies, payors, and enterprise clients
• Serve as HIPAA Privacy Officer, including ownership of privacy program, policy framework, workforce training, and PHI incident response
• Partner with the Chief Information Security Officer on risk assessments and data protection strategy
• Chair our Quality & Compliance Committee and lead clinical quality and patient safety initiatives in partnership with clinical leadership
• Build and mentor a high-performing compliance team that scales with business growth

What You Bring

• 15+ years of experience in healthcare compliance, regulatory affairs, health system operations, or related legal/risk leadership
• 7+ years in senior leadership, ideally serving as VP or Head of Compliance in a high-growth healthcare environment
• Experience in telehealth, multi-state provider groups, virtual care platforms, or health plans
• Deep expertise in U.S. healthcare regulations, including:
  
  • All telehealth regulations
  • DEA and prescribing regulations
  • URAC/NCQA accreditation standards (Credentialing and Telehealth)
  • HIPAA/HITECH
  • CMS compliance program requirements and payor policies
  • Fraud, Waste & Abuse prevention
  • AKS, Stark, False Claims exposure
• Proven ability to build and scale corporate compliance programs
• Executive presence and board communication experience
• Advanced degree preferred (JD, MBA, MHA, MPH or equivalent)
• CHC, CHPC, or similar certification a plus

Who You Are

• A strategic, pragmatic operator who understands how to enable the business while protecting it from risk.
• A trusted advisor to executives and teams, acting as a strong communicator and influential cross-functional leader.
• Exceptional interpersonal and operational skills, with a proven ability to manage complex tasks and relationships simultaneously.
• Possess a strong sense of ownership and accountability for all deliverables, driving programs from conception through completion with a relentless drive for high-quality results. Ability to anticipate obstacles and problem solve. 
• Strong prioritization and multitasking capabilities and the demonstrated ability to execute complex programs and initiatives in a virtual or remote environment.
• Highly collaborative, skilled at aligning stakeholders and achieving shared goals through excellent teamwork.
• Calm under pressure and decisive when facing complex risk environments.
• Motivated by mission, outcomes, and ultimately improving patient access to care.
• Build and maintain a URAC-compliant telehealth compliance and quality program and NCQA credentialing program, including drafting and editing policies, monitoring, reporting and corrective action frameworks
• Oversee multi-state telehealth compliance, provider licensure rules, credentialing standards, prescribing regulations, and payor compliance policies
• Direct compliance audits and manage responses to regulatory agencies, payors, and enterprise clients
• Serve as HIPAA Privacy Officer, including ownership of privacy program, policy framework, workforce training, and PHI incident response
• Partner with the Chief Information Security Officer on risk assessments and data protection str