Compliance Officer
About the role
The NC HIEA Compliance Officer will ensure that operations follow all relevant state and federal requirements for securely transacting health information via the HIE Network, NC HealthConnex. The role requires familiarity with risk management, leading internal risk assessments, and knowledge of HIPAA and NIST privacy and security requirements for health information networks. This position works closely with the NC HIEA leadership team, DIT legal counsel, DIT Privacy Team, and DIT Security and Risk Management Team to continuously improve the NC HIEA’s security and risk profile.
Location: Raleigh, NC (remote work allowed with short‑notice onsite requirement). A mandatory three‑week onsite training is required at the start of the engagement. Once all staff return to site, the candidate will need to work onsite full‑time.
Responsibilities
- Assist with the development and implementation of a compliance program for the NC HIEA, including preparation for HITRUST certification.
- Create sound internal controls and monitor adherence to them.
- Draft and revise policies.
- Proactively audit processes, practices, and documents to identify weaknesses.
- Evaluate activities to assess compliance risk.
- Collaborate with external auditors and the DIT Security Team when needed.
- Set plans to manage a crisis or compliance violation.
- Educate and train employees on regulations and industry practices.
- Address employee concerns or questions on compliance.
- Keep abreast of industry standards and business goals.
Requirements
- Proven experience as a Compliance Officer.
- Experience in risk management.
- Knowledge of HIPAA and NIST requirements.
- Familiarity with industry practices and professional standards.
- Excellent communication skills.
- Integrity and professional ethics.
- Attention to detail.