Compliance Associate

Job Summary:
The Compliance Associate provides support for continued management of internal and customer-reportable investigations under the scope of the company's HIPAA Privacy, Cardholder Data Security, and Information Security programs and other in-scope operations; the individual investigates potential incidents under the scope of these programs and assists in the generation of internal and, when applicable, external reports of findings. 

These Goals and objectives are not to be construed as a complete statement of all duties performed; employees will be required to perform other job-related duties as required.  Goals and objectives are subject to change.

All activities must be in compliance with Equal Employment Opportunity laws, HIPAA, ERISA and other regulations, as appropriate.  

Essential Functions: In addition to working as prescribed in our Performance

Factors specific responsibilities of this role include: 
•    Maintain the inventory/log of all identified incidents.
•    Contribute to the assignment of corrective and preventive actions to open investigations.
•    Conduct investigations for a determined subset of potential incident types.
•    Make initial telephone notification to customers confirmed to have been affected by incidents.
•    Compile incident data for quarterly executive reports. 
•    Collaborate, as needed, with the Cyber Security group to obtain artifacts supportive of any given investigation.
•    Provide overall assistance to the Compliance Analyst.
•    Stay up-to-date on relevant regulations and industry standards, such as HIPAA and PCI-DSS, ensuring that compliance efforts reflect the latest requirements. 

Minimum Requirements:
Education/Experience/Certification Requirements
•    Bachelor’s degree (preferred) or equivalent experience in health care, health care technology, regulatory compliance, or related fields.
•    Excellent communication (written and oral) and interpersonal skills.
•    Strong organizational, multi-tasking, and time-management skills. 
•    Must be detail-oriented and able to follow through on issues to resolution.
•    Must be able to act both independently and as a team member.
•    Competence with Microsoft Office Suite (Excel, Word, and Teams).

Preferred Qualifications:
•    Familiarity with regulatory standards such as HIPAA and PCI-DSS
•    Ability to communicate effectively with employees in other business units, especially those in more technical functional areas.
•    Proficiency in Microsoft Office Suite (Excel, Word, and Teams).