Compliance Manager

About the role

The RMS Compliance Manager is responsible for ensuring that the company conducts its business in full compliance with all applicable national laws and regulatory requirements. This role includes the creation, review, enforcement, and oversight of company policies, procedures, and industry best practices to support a strong culture of compliance and ethical operations.

Responsibilities

• Conduct compliance and risk assessments, including internal control testing.
• Prepare for and respond to external audits, regulatory inquiries, and legal requests.
• Manage third-party vendor risk assessments and ongoing monitoring.
• Oversee incident and breach response, including investigation, notification, and remediation.
• Maintain and enhance SOC 2 controls, documentation, and evidence management.
• Track and validate remediation efforts to ensure control effectiveness.
• Develop and enforce policies related to PHI, data classification, encryption, access controls, and data retention.
• Coordinate regulatory and privacy aspects of incident and breach response, ensure notification obligations are met.
• Evaluate business systems and operations for regulatory and ethical compliance.
• Draft, update, and implement corporate compliance policies and procedures.
• Lead mandatory compliance training programs (e.g., security awareness, HIPAA) and manage LMS tracking and reporting.
• Conduct phishing simulations and targeted security awareness initiatives.
• Partner with cross-functional leaders to ensure operational compliance.
• Perform other related duties as assigned.

Requirements

• Indoor climate-controlled environment.
• Moderate to quiet noise level.
• Regularly required to communicate verbally and in written form.
• Physically required to utilize a laptop and other electronic devices effectively.
• Must lift and/or move up to 20 pounds (laptop computer, bag, and accessories).
• Specific vision abilities required include close vision and distance vision.
• All applicants are subject to drug screens and background checks per company policies.

Qualifications

• Working knowledge of applicable regulatory frameworks (e.g., HIPAA, SOC 2, ISO 27001, or industry-specific standards).
• Experience supporting audits, regulatory examinations, and control assessments.