Director of Compliance, Risk Management & Regulatory Affairs

The Director of Compliance, Risk Management & Regulatory Affairs provides operational leadership for Sandhills Medical Foundation's corporate compliance, enterprise risk management, and regulatory affairs programs. Reporting to the Vice President of Compliance & Continuous Improvement, this position oversees the daily implementation, monitoring, and continuous improvement of the organization's compliance infrastructure to ensure adherence to HRSA Health Center Program requirements, FTCA, HIPAA, CMS, federal and state regulations, and organizational policies.

The Director serves as the operational lead for regulatory readiness, compliance investigations, enterprise risk management, medical record compliance auditing, policy governance, incident management, and corrective action monitoring while fostering a culture of ethics, accountability, and continuous organizational readiness.

Essential Responsibilities

Corporate Compliance

• Manage the day-to-day Corporate Compliance Program.

• Implement and monitor the Corporate Compliance Plan and annual Work Plan.

• Coordinate Compliance Committee activities and maintain compliance documentation.

• Monitor corrective action plans and develop executive compliance dashboards.

• Promote ethical business practices and regulatory accountability.

Regulatory Affairs & HRSA Compliance

• Coordinate organizational compliance with HRSA Health Center Program requirements.

• Administer HRSA Electronic Handbooks (EHB), compliance documentation, and evidence management.

• Lead Operational Site Visit (OSV) readiness and maintain year-round survey preparedness.

• Coordinate FTCA deeming, Change in Scope requests, grant compliance activities, and other HRSA regulatory submissions.

Enterprise Risk Management

• Administer the Enterprise Risk Management Program.

• Conduct organizational risk assessments and maintain the risk register.

• Lead Root Cause Analyses (RCA), Failure Mode and Effects Analyses (FMEA), and mitigation planning.

• Support emergency preparedness, business continuity, and insurance risk activities.

HIPAA Privacy & Compliance

• Serve as the operational lead for the Privacy Program.

• Coordinate privacy investigations, breach response, privacy audits, and required notifications.

• Collaborate with Information Technology to support HIPAA Privacy and Security compliance.

• Develop and deliver privacy education and awareness programs.

Incident Management & Investigations

• Oversee the organizational incident reporting program.

• Coordinate compliance investigations and maintain confidential investigative records.

• Analyze trends, develop corrective action plans, and report significant findings to leadership.

• Promote Just Culture principles and patient safety initiatives.

Medical Record Compliance

• Coordinate annual medical record compliance audits.

• Evaluate documentation quality, coding integrity, and regulatory compliance.

• Monitor audit findings, provide education, and support documentation improvement initiatives.

Policy Governance

• Maintain the organizational policy management process.

• Coordinate policy development, annual reviews, approvals, and version control.

• Ensure policies remain compliant with applicable regulatory and accreditation standards.

Education & Leadership

• Develop and coordinate annual compliance education, including HIPAA, Fraud, Waste & Abuse, Corporate Compliance, and regulatory updates.

• Provide leadership to compliance staff, establish departmental goals and KPIs, and prepare reports for executive leadership and the Board.

• Collaborate across departments to strengthen organizational compliance and regulatory readiness.