Compliance Analyst

About the role

Health Gorilla is a national interoperability and health information exchange company focused on improving healthcare through secure, standards-based data sharing. As a designated Qualified Health Information Network (QHIN) under the Transaction and Enrollment Facilitation Center (TEFCA), Health Gorilla connects healthcare organizations, technology partners, and patients through a trusted network.

Responsibilities

• Conduct compliance monitoring activities to identify potential risks, anomalies, or policy violations.
• Review system activity, access logs, data exchange activity, and operational workflows for compliance concerns.
• Assist with investigations involving privacy, security, TEFCA, participant compliance, or data-use concerns.
• Document findings, recommend corrective actions, and track remediation efforts.
• Utilize Databricks, SQL, or similar analytical platforms to support compliance reviews, audits, and investigations.
• Develop and execute queries or leverage modern tools to analyze data exchange activity, access patterns, user behavior, and operational metrics.
• Leverage AI where appropriate to prepare reports and dashboards that support compliance monitoring and risk management activities.
• Partner with Engineering and Data teams to improve automated compliance monitoring capabilities and optimize the use of AI tools.
• Support ongoing compliance with TEFCA, the Common Agreement, and QHIN operational requirements.
• Monitor changes in healthcare regulations, interoperability requirements, and industry guidance.
• Assist with regulatory audits, assessments, and external reviews.
• Participate in compliance reviews for new products, services, partnerships, and business initiatives.
• Work closely with Legal, Security, Privacy, Product, Engineering, and Operations teams.
• Provide practical compliance guidance to business stakeholders.
• Foster a culture of integrity, accountability, and regulatory excellence.

Requirements

• Bachelor’s degree in Healthcare Administration, Health Informatics, Public Health, Business, Information Systems, Law, or related field.
• Minimum 5 years of experience in healthcare compliance, healthcare operations, health information exchange, health IT, healthcare privacy, or related regulatory functions.
• Working knowledge of HIPAA and other privacy laws, TEFCA and interoperability frameworks, 21st Century Cures Act and Information Blocking requirements, and healthcare privacy and security principles.
• Experience performing compliance monitoring, audits, investigations, or risk assessments.
• Strong analytical, organizational, process-driven, and documentation skills.
• Excellent written, presentation, and verbal communication skills.
• Experience reviewing healthcare technical specifications.
• Experience leveraging AI-powered tools to enhance compliance workflows.

Preferred qualifications

• Experience working for a QHIN, HIE, healthcare technology company, EHR vendor, payer, or healthcare data network.
• Experience writing and executing SQL queries.
• Experience using Databricks, Snowflake, Azure Data Explorer, or similar data analytics platforms.
• Experience supporting compliance programs involving healthcare interoperability and data exchange.
• Familiarity with healthcare standards including HL7, FHIR, CDA, and IHE frameworks.
• Professional certifications such as Certified in Healthcare Compliance (CHC), Certified in Healthcare Privacy Compliance (CHPC), Certified Information Privacy Professional (CIPP/US), or Certified Information Systems Auditor (CISA).
• Experience working with regulatory audits and external assessors.

Benefits

The base salary range for this role is $95,000 to $120,000, based on experience and geography. Please note that ranges may be modified at any time, and there is no guarantee offers will be at the top of a posted range.

New hire stock option grant

401(k) plan with discretionary matching (historically matched at 3%)

Unlimited PTO plus 12 Holidays

Medical, dental, and vision insurance for you and your family

Short-, long-term disability, and life insurance

Optional: Pet Insurance, Legal Services, and Credit Monitoring

Mental health and wellness support

Paid parental leave (up to 12 weeks)

Monthly stipend for phone and internet

Use of an Apple Laptop plus a $400 stipend for additional equipment