Compliance Officer

The Compliance Officer is responsible for overseeing and enforcing compliance with information security standards and regulatory frameworks, including HIPAA, 340B, and others as documented. Under the supervision of the IT Director, this role develops, implements, and monitors policies and procedures to ensure organizational adherence to legal and ethical requirements. They provide records management and oversight for patients, investigations for non-compliance, and credentialing services for employees.

Responsibilities

1. HIPAA Compliance
2. Pharmacy Compliance (340b)
3. FTCA
4. Credentialing
5. IT Security
6. Vaccine Technology
7. Physical Security
8. Customer Service Liaison
9. Records Management
10. Quality Improvement
11. Investigation and Enforcement

Requirements

General Requirements:

• Must be insurable through the Tribe’s vehicle insurance required.
• Must pass a criminal and fingerprint background check according to P.L. 101-630 standards required.
• Must pass a pre-employment alcohol/drug screening required.

Education and Experience:

• Bachelor’s Degree in a related field from an accredited university or a minimum of five (5) years’ experience in a health care setting with active compliance and IT Security requirements and frameworks.
• Five (5) years’ experience working in a medical or a health clinical setting required.
• Two (2) years’ experience in an administrative or supervisory position required.
• One (1) year experience in administration of health clinics in both remote and non-remote settings required.
• Preferred experience working with Native Americans.

License & Certification:

• Must possess, maintain, and provide proof of a valid Utah Driver’s License.
• Must possess, maintain, and provide proof of a valid Certification or equivalent experience in HIPAA Privacy and Security Compliance, or complete within one (1) year of hire.
• Must possess, maintain, and provide proof of a valid Certification or equivalent experience in Healthcare Compliance, or complete within one (1) year of hire.
• Must obtain CISA, Security+, GIAC GX-FA, or equivalent certification within one (1) year of employment.
• Complete training for 340b compliance through a HRSA sponsored education program, such as 340b University.
• Complete annual training for HIPAA compliance that aligns with HHS 405d content and requirements.

Benefits

• Group Health Care Plan (Health, Dental, Vision, Life/AD&D and Long-Term Disability). Employer paid premiums for Employee, Spouse and Dependents
• Supplemental/Voluntary Benefits (Aflac, Life/AD&D and Short-Term Disability)
• HSA Bank Account - Monthly employer contributions
• Retirement Plan (401k, Roth) - Dollar for dollar match up to 6%
• Paid Vacation/Annual Leave
• Paid Sick Leave
• Paid Holidays (Federal, State and Tribal) - Paid according to set work schedule only
• Paid Birthday Leave
• Paid Bereavement Leave
• Employee Assistance Program
• Education Assistance Program
• Wellness Program - Earn up to $1,000 into your HSA account per year