<p>Established in 1980, the Greater Lawrence Family Health Center (GLFHC) is a multi-site mission-driven non-profit organization employing over 700 staff whose primary focus is providing the highest quality patient care to residents throughout the Merrimack Valley. Nationally recognized as a leader in community medicine (family practice, pediatrics, internal medicine, and geriatrics), GLFHC has clinical sites throughout the service area and is the sponsoring organization for the Lawrence Family Medicine Residency program.</p> <p>GLFHC is currently seeking a Compliance Officer to join our team. The Compliance Officer is responsible for overseeing the development, implementation, and daily operations of the Health Center's Corporate Compliance Program. This position promotes compliance with applicable federal, state, and local regulations; ensures adherence to internal policies and Standards of Conduct; manages the incident reporting process; and serves as the organization's HIPAA Privacy Official. The Compliance Officer works collaboratively across departments to monitor compliance risks, support staff education, and maintain regulatory readiness.</p> <p>Compliance Program Leadership</p> <ul> <li>Oversees implementation and maintenance of the Corporate Compliance Program and annual Compliance Work Plan. </li><li>Ensures organizational adherence to compliance policies, procedures, and Standards of Conduct. </li><li>Promotes awareness of compliance obligations through communication and education initiatives, including education on the Compliance Hotline. </li><li>Serves as primary liaison for Compliance for staff and leadership. </li><li>Provides regular reports to the CEO and quarterly reports to the Board/Board Committee. </li></ul> <p>Policy & Procedure Governance</p> <ul> <li>Coordinates development, annual review, revision, approval, and retirement of policies and procedures. </li><li>Ensures policies are regulatory compliant, consistent, and properly formatted. </li><li>Maintains a centralized, accessible Policy & Procedure repository and MOU/MOA/contract repository. </li><li>Tracks policy lifecycle timelines and maintains historical and archived versions. </li></ul> <p>Incident Reporting & Internal Monitoring</p> <ul> <li>Administers the electronic incident reporting system, ensuring it is functional and accessible. </li><li>Provides user training and support. </li><li>Assigns incidents to appropriate managers and ensures timely follow-up. </li><li>Monitors incident trends, prepares reports, and supports corrective action planning. </li></ul> <p>HIPAA Privacy Official</p> <ul> <li>Serves as the HIPAA Privacy Official for the Health Center. </li><li>Investigates privacy complaints, potential breaches, and unauthorized disclosures. </li><li>Ensures documentation of investigations and compliance with breach notification requirements. </li><li>Oversees Business Associate Agreement (BAA) process in collaboration with contracting staff. </li></ul> <p>Regulatory Readiness & Audit Support</p> <ul> <li>Coordinates regulatory audit readiness (e.g., HRSA OSV, DPH, CMS, OCR). </li><li>Prepares required documentation and ensures departments are aware of compliance responsibilities. </li><li>Assists in maintaining HRSA-required documents (e.g., Form 5A/B/C updates). </li><li>Serves as a resource to departments during audits and regulatory reviews. </li><li>Maintains ongoing official communication with the Board of Registration in Medicine - specifically through mandatory reporting of PCA Annual and Semi-Annual reports for the GLFHC Board of Directors. </li><li>Responsible for FTCA and annual FTCA deeming process as well as any FTCA claims from DOJ and requests from Office of General Counsel. </li></ul> <p>Organizational Licenses, Certificates & Accreditation Documents</p> <ul> <li>Tracks organizational licenses and certificates, notifying departments of upcoming expirations. </li><li>Maintains current and archived regulatory documents for reference and audits. </li><li>Ensures accreditation-related documents are available to leadership. </li></ul> <p>Education & Training</p> <ul> <li>Partners with Human Resources to support compliance and privacy training for new hires. </li><li>Ensures ongoing staff compliance education, including annual refreshers. </li><li>Supports department managers in delivering area-specific compliance training. </li></ul> <p>Compliance Investigation & Issue Resolution</p> <ul> <li>Conducts or coordinates investigations of compliance concerns. </li><li>Documents findings and supports implementation of corrective action plans. </li><li>Identifies potential areas of risk and collaborates with leadership to develop mitigation strategies. </li></ul> <p>Collaboration & Integration</p> <ul> <li>Works closely with Quality, HR, IT, Finance, Operations, Pharmacy and other departments on compliance matters. </li><li>Collaborates with key stakeholders to ensure adherence to 340B program requirements, including eligibility, diversion prevention, and audit readiness, while implementing corrective actions and safeguarding compliance with HRSA and organizational standards. </li><li>Ensures compliance considerations are integrated into organizational initiatives. </li><li>Maintains strict confidentiality regarding all compliance matters. </li><li>Serves as a member of the Quality Council to integrate and ensure compliance in system-wide initiatives. </li><li>Serves as a member of the Safety and Sentinal Event Committee. </li></ul> <p>Risk Manager & Claims Point of Contact for HRSA:</p> <ul> <li>Serves as GLFHC's Risk Manager and Claims Point of Contact for HRSA: </li><li>Coordinates Risk Management Functions daily, to maximally ensure that identification of risk exposure, assessment, appraisal and loss prevention are carried out, so that the Health Center remains safe for its patients, families, and employees. Identifies and limits legal exposures and directly assists outside counsel/Department of Justice AUSAs assigned to federal tort cases in the handling / defense of legal claims. </li><li>Responsible for the management and processing of all claims-related activities on a daily basis. This includes but is not limited to coordination of claims management, addressing any potential or actual health or health-related claim (including medical malpractice claims) that may be eligible for FTCA coverage as well as working with the Finance and People departments on other commercial liability and/or employment claims. </li><li>For any potential or actual claim: </li><li></li><li>Responsible for ensuring the preservation of all GLFHC documentation related to any actual or potential claim or complaint (including issuing, re-issuing and all education related to Litigation Holds). </li><li>Responsible for ensuring that all FTCA-related notification of intent to sue or other service of process/summons that GLFHC or its providers, receives related to any alleged claim or complaint, is promptly sent to the HHS Office of General Counsel General Law Division. </li><li>Responsible for working in full cooperation with the HHS Office of General Counsel Law Division or, if deemed covered, the Department of Justice attorneys that are assigned to defend. </li></ul> <p>Experience</p> <ul> <li>7+ years of experience in healthcare compliance or regulatory roles; FQHC experience strongly preferred. </li><li>Experience in policy management, HIPAA privacy, and incident/complaint investigation. </li><li>Strong communication, facilitation, and interpersonal skills. </li><li>Excellent attention to detail, organization, and ability to manage competing deadlines. </li><li>Proficiency with Microsoft Office and web-based compliance tools. </li></ul> <p>Education</p> <ul> <li>Bachelor's degree required; equivalent experience considered. </li><li>Compliance certification (CHC, CHPC, or similar) preferred. </li></ul> <p>GLFHC offers a great working environment, comprehensive benefit package, growth opportunities and tuition reimbursement.</p>