Compliance Manager

External Description

Job Title: Compliance Manager, Healthcare Contracts

Department: Finance / Accounting – Contract Management

Dual Report To: Chief Financial Officer and Senior Vice President, Managing Director

Travel: 10%

Location: Austin

About the role:

GSD&M is seeking a Compliance Manager who will partner with local and Corporate stakeholders to perform ongoing complex risk analyses toensure systems and technologies satisfy Information Assurance, Cybersecurity, Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), Health Information Technology For Economic and Clinical Health (“HITECH”) Act and other federal and state regulatory requirements; and ensure compliance with other healthcare client related contractual obligations.

We are looking to hire an experienced professional with a general understanding of Finance, Accounting, Procurement and Advertising Media (digital platforms), to ensure Agency compliance to relevant healthcare Business Associate contractual obligations and respective federal and state regulatory requirements. This role is the main point of contact between internal agency stakeholders, and corporate finance/accounting and legal teams.

This role will support the implementation of localized policies and procedures to ensure compliance with client contractual obligations related to assigned healthcare clients, ensuring that adequate documentation and evidence are maintained to successfully meet external, federal, or state governmental audit needs. This role will ensure that agency employees and subcontractors receive documented ongoing training on the handling and use of Protected Health Information (“PHI”) Electronic Protected Health Information (“ePHI”) as required by federal and state laws.

Job responsibilities include:

• Utilize strong leadership skills to align stakeholders across the various local and corporate departments to ensure compliance with assigned healthcare industry client contract(s), business associate obligations –as applicable, and regulatory compliance.• Train team members to increase department knowledge and understanding of contractual requirements, PHI awareness.• Ongoing management of all related client vendor activities, which includes but not limited to vetting, facilitate risk assessment review process with the Corporate IT teams, facilitate master services agreement and scope of work onboarding process with Corporate Legal Teams. • Conduct internal compliance risk assessments, testing and monitoring in accordance with client contractual and regulatory expectations. Review reports and available risk indications to identify, propose and implement corrective action. Continuous implementation of system improvements. • Centralize oversight of the agency’s administration, investigation, and enforcement of policy and procedures regarding Privacy and handling of PHI or ePHI data as appropriate. Establish internal reporting process to address security concerns as needed.• Prepare appropriate documentation and respond to compliance questions internally and externally.• Continuous update of regulatory requirements and developments on related matters.• Partnership with the People department, Account Leadership and Project Management teams to ensure compliance regarding staff related contractual requirements.• Monitor compliance with HUB subcontracting plan requirements. • Monitor media purchase agreements, estimates of work, third party agreements and related vendor invoices, travel charges, and invoice payment to ensure compliance with contractual requirements.• Ongoing documentation of processes, workflows, and system diagrams related to delivery of the client scope of services. • Facilitate ongoing internal, external, and third-party related assessments and/or audit. Work with respective stakeholders to address recommendations or findings.• Ongoing collaboration with Corporate IT organization to address systems security related contractual requirements.• Facilitates annual review of the agency’s business continuity plan. • Provides after hours or weekend support, when needed.• Ad-hoc related special projects as needed.