Senior Manager, Healthcare Privacy and Compliance

Come join our team!

There are many reasons why EPIC Insurance Brokers & Consultants has become one of the fastest-growing firms in the insurance industry. Fueled and driven by capable, committed people who share common beliefs and values and “bring it” every day, EPIC is always looking for people who have “the right stuff” – people who know what they want and aren’t afraid to make it happen.

Headquartered in San Francisco and founded in 2007, our company has over 3,000 employees nationwide. With locations spread out across the U.S., our local market knowledge and industry expertise helps support our clients' regional and global needs. We have grown very quickly since our founding, and we continue to see growth and success thanks to our hard-working and growth-minded employees. 

Our core values are: Owner mindset, Inspire trust, Think big, and Drive results. If these values and growth align with what you're looking for in your next career? Then consider joining our amazing team!

 

JOB OVERVIEW:

The primary objective of the Senior Manager, Healthcare Privacy and Compliance is to strategically lead and continuously enhance the organization’s healthcare privacy and compliance program, ensuring all operations adhere to the highest regulatory and ethical standards. This role is responsible for proactively managing compliance risks, fostering a culture of accountability and data security, and collaborating with key stakeholders across and outside the organization to maintain effective compliance practices.

The Senior Manager, Healthcare Privacy and Compliance must be a strategic, analytical, and technically proficient leader with deep expertise in healthcare data privacy and compliance. This person should be detail-oriented, and self-motivated, with strong communication skills and the ability to collaborate effectively across diverse teams. This position will work closely with executive leadership as well as with the compliance committee, business unit leaders, IT and security teams, and internal departments such as HR, legal, and operations. Additionally, they will engage employees and contractors through training and compliance initiatives and interact with external stakeholders including regulatory authorities and clients.

 

LOCATION: This position is 100% remote

 

WHAT YOU’LL DO:

PRIMARY OBJECTIVES:

• Lead the development, implementation, and continuous improvement of a comprehensive healthcare privacy and compliance program.
• Ensure all organizational operations meet and exceed regulatory, governance, and client standards, including HIPAA, HITRUST, SOC2, and Medicare/Medicaid requirements.
• Proactively identify and mitigate compliance risks across the enterprise.
• Foster a culture of accountability, data security, and ethical practices throughout the organization.
• Collaborate with executive leadership, business unit leaders, IT and security teams, internal departments, employees, contractors, and external stakeholders to ensure effective compliance management.
• Promote compliance awareness and provide training to all relevant parties.

RESPONSIBILITIES

• Lead the design, implementation, and ongoing enhancement of a comprehensive healthcare privacy and compliance program, ensuring all divisions consistently meet or exceed regulatory, governance, and client standards, including HIPAA, HITRUST, SOC2, and Medicare/Medicaid requirements.
• Develop, update, and enforce policies, procedures, and monitoring activities to guarantee compliance with all relevant regulations and contractual obligations, proactively adapting to changes in the regulatory landscape.
• Oversee and continuously improve the auditing program, including planning audits, gathering and analyzing evidence, identifying deficiencies, and driving the implementation of corrective actions to strengthen compliance posture.
• Serve as a trusted advisor to business units, providing expert guidance on certifications, regulatory requirements, and best practices for healthcare data privacy and security.
• Chair and manage the compliance committee for relevant business units, facilitating cross-functional collaboration and ensuring alignment on compliance objectives and initiatives.
• Continuously monitor, assess, and document compliance risks across the organization, maintaining a dynamic risk register and prioritizing mitigation strategies to address vulnerabilities and emerging threats.
• Coordinate with internal teams to develop and execute comprehensive risk mitigation plans, ensuring timely resolution of compliance issues and fostering a proactive risk management culture.
• Develop, maintain, and execute an incident response plan for compliance breaches, collaborating with r