Compliance, Risk and Control Officer

HealthTrust, Inc. provides high quality, cost-effective employee benefit products and services for public employers and employees in New Hampshire.

Compliance, Risk and Control Officer

HealthTrust seeks an experienced Compliance, Risk and Control Officer. This key position administratively reports to the General Counsel and evaluates HealthTrust’s compliance with rules, regulations, laws, policies, procedures, guidelines and principles. The individual identifies potential areas of compliance vulnerability and risk, develops and recommends corrective action plans for problem resolution including policy development, guidance and training to detect and mitigate non-compliance issues. The position functions as the organization’s HIPAA Privacy and Security Officer and is responsible for managing the risks and impacts of HIPAA and other laws and regulations and providing internal and external training. Responsibilities also include developing an annual risk assessment and the resulting annual audit plan, performing internal audits and evaluations, and providing high level reports to the Board of Directors. The Compliance, Risk and Control Officer consults with management to enhance internal controls, manages and performs audits of the third-party administrators, and provides support to external auditors to meet audit goals and objectives. 

The Compliance, Risk and Control Officer:

• Evaluates HealthTrust’s compliance with rules, regulations, laws, policies, procedures, guidelines and principles. Identifies potential areas of compliance vulnerability and risk; identifies needed corrective action plans including policy and procedure development for problem resolution, and provides guidance and training to detect and mitigate non-compliance issues.
• Acts as the HIPAA Privacy and Security Officer; is responsible for managing the risks and impacts of Federal and State privacy laws and policies including, but not limited to the Health Insurance Portability and Accountability Act (HIPAA) and best practices governing the protection of Personally Identifiable information (PII).  Oversees activities related to the development, implementation and adherence to the organization’s HIPAA policies and procedures including review, identification and responses to potential breaches. Ensures compliance with the HIPAA Security Rule, completes regular risk assessments, identifies opportunities to mitigate risks to protected health information, develops appropriate policies and procedures, and implements appropriate staff trainings. Responsible for the operation and facilitation of the Organization’s HIPAA Review Team, HIPAA Security Team and HIPAA Resource team.
• Provides regular, ongoing training to employees at virtual and in-person all staff meetings, and to vendors, as needed.
• Works with human resources, Infrastructure & Security Team, Reporting & Data Department, and management, designs and executes education and training programs relating to the Organization’s Personnel Handbook, Standards of Conduct Policies, HIPAA and IT policies in order to heighten awareness of the standards, and increase the understanding of new and existing compliance issues and related policies and procedures.
• Performs formal audits including identifying potential areas of risk, defining the scope, methodologies, audit plan, resources, and timeline necessary to complete the audit.
• Submits written reports to the Board of Directors regarding the status of HealthTrust’s governance, risk management and compliance programs and has complete and unrestricted access to the Board of Directors.
• Monitors and identifies changes in applicable rules, regulations, standards and related trends that are relevant to the organization.
• Provides support to external auditors to meet audit goals and objectives. Oversees third-party audits of HealthTrust vendors.

The Compliance, Risk and Control Officer works directly with all members of the organization to support in all areas of risk. A strong background in compliance, internal auditing and risk management required. Must have related degree, be people-oriented with excellent oral and written communication skills, and be committed to working as part of a team to service our organization. 

Qualifications: Bachelor’s degree, preferably in Business Administration, Finance, Accounting, Data Analytics and/or JD or equivalent combination of education and experience. Prior work experience of at least five years in a responsible position involving internal auditing and risk management. CHPC, CIA, and/or CRMA certification desirable. Candidate must live in New Hampshire. This is a primary in-office or hybrid position. To apply, e-mail a résumé and cover letter to: hr@healthtrustnh.org 

HealthTrust welcomes talent from all backgrounds and perspectives. Our success is directly correlated to our people and as an organization we strive to foster an inclusive and diverse environment where we all work toward our common goal of health promotion and disease prevention.

In addition to competitive salaries, HealthTrust provides a family-friendly work environment and offers excellent benefits including health, dental, life insurance, short-term and long-term disability insurance, a defined benefit pension plan and a deferred compensation plan, flexible spending accounts, an on-site fitness center and remote work capabilities.

Closing Date: October 12, 2022

Return to List