Vice President - Compliance, Internal Audit and Privacy

About the Role

Responsible for working with Prisma Health leadership and the Finance, Audit and Compliance Committee to develop, implement, and ensure quality "state of the art" compliance, privacy, and internal audit programs/controls/behaviors that minimize or mitigate risk for Prisma Health and related affiliates and joint ventures, Promise Health Plan, and the Invio Network.

Serves as Prisma Health's Chief Compliance and Privacy Officer, administering an effective corporate compliance program consistent with Office of Inspector General (OIG), Centers for Medicare and Medicaid Services (CMS), HIPAA, and other federal and state regulatory requirements. Maintains direct and independent access to the Chief Executive Officer and the Finance, Audit and Compliance Committee regarding significant compliance, audit, privacy, and ethics matters.

Responsibilities

• Institutes and maintains effective communication, education, and training programs for privacy, internal audit, and corporate compliance programs as required by local, state, and federal laws.
• Oversees Prisma Health's Code of Conduct, conflict of interest program, and mechanisms for reporting concerns, including anonymous reporting channels.
• Establishes strategic direction for corporate compliance, internal audit, and privacy programs by implementing processes, tools, policies, and systems to assess, report, measure, monitor, and manage risk through development of the annual internal audit and corporate compliance work plans.
• Provides executive direction for the co-sourced internal audit relationship.
• Conducts enterprise-wide compliance and internal audit risk assessments and develops annual compliance and internal audit work plans based on identified risks, regulatory changes, investigations, enforcement trends, and operational priorities.
• Provides oversight of regulatory compliance programs including Medicare, Medicaid, billing and coding compliance, physician arrangements, Stark Law, Anti-Kickback Statute, EMTALA, 340B, reimbursement integrity, research compliance, and other healthcare regulatory requirements.
• Oversees compliance monitoring, auditing, and validation activities designed to assess adherence to regulatory requirements, organizational policies, billing and coding standards, and documentation practices.
• Coordinates response to alleged violations of rules, regulations, Code of Ethics, information security breaches, and policies and procedures. Ensures appropriate reporting of violations or potential violations to duly authorized enforcement agencies as required.
• Oversees special audits or investigations and coordinates with appropriate departments in the investigation and resolution of audits. Ensures corrective action plans are developed, implemented, validated, and reported through appropriate governance structures.
• Works with the Finance Audit and Compliance Committee to ensure appropriate governance oversight of corporate compliance, internal audit, and privacy programs. Regularly reports on compliance effectiveness, privacy incidents, audit results, significant investigations, emerging risks, and corrective action progress.
• Has authority to directly communicate with the Chair of the Finance, Audit and Compliance Committee as circumstances warrant.
• Works with Human Resources and other leadership to support programs that enhance recruitment, development, retention, and engagement of team members. Ensures ongoing staff compliance with organizational, facility, state, federal, and Joint Commission requirements.
• Works with operational owners, Legal, Information Security, and other departments to review contracts, Business Associate Agreements, and Data Use Agreements for compliant provisions and establishing acceptable behaviors and information management practices.
• Develops, implements, and monitors annual operating budgets for corporate compliance, privacy, and internal audit departments.
• Communicates and advises the Chief Executive Officer to ensure effective oversight of Compliance within Prisma Health and Promise Health Plan in compliance with Federal and State guidelines.
• Serves as a member of the following committees: Data Governance, AI Governance, 340B Steering, Information Security Risk Management, Place of Service Governance, Outlook Retention Oversight (Chair), Conflicts of Interest (disclosures and management).
• Performs other duties as assigned.

Supervisory Responsibilities

Job has direct and/or indirect supervision of team members, including final budget authority, hire/termination authority, performance appraisal responsibility, and disciplinary authority. Considered a member of management staff with direct reports.

Requirements

• Master's degree.
• Ten (10) years of progressively responsible experience in healthcare compliance, privacy, internal audit, legal, regulatory, or governance functions, including at least five (5) years in senior executive leadership roles.
• One or more advanced certifications including CHC (Certified in Healthcare Compliance), CHPC (Certified in Healthcare Privacy Compliance), CIA (Certified Internal Auditor), CPA (Certified Public Accountant), JD (Juris Doctorate), CISA (Certified Information Systems Auditor), or CCEP (Certified Compliance and Ethics Professional).

Skills

• Knowledge and understanding of the Office of Inspector General's guidelines for Corporate Compliance Programs.
• Knowledge and understanding of the complex healthcare environment, internal control systems, and the Institute of Internal Auditors' International Professional Practice Framework.
• Knowledge and experience in information security, privacy program administration, regulatory enforcement agencies, and laws, access and release of information.
• Ability to identify, assess, and manage known and emerging risks.

Schedule

Day shift.

Location

Prisma Health Corporate Office, Corporate Department - Finance - Executive.