Director, Corporate Compliance – Privacy

Gravie

. Lead and mature Gravie's healthcare compliance and privacy programs .

Posted 11/2/2026full-timeRemote • United StatesLead💰 $147,000 - $196,300 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in healthcare compliance and privacy, including risk assessment, policy development, and regulatory adherence. Proven ability to lead teams, manage cross-functional initiatives, and build relationships with stakeholders and regulators.

Highest-signal resume keywords

Healthcare Compliance ManagementPrivacy Program DevelopmentTeam Leadership and CoachingRegulatory Risk AssessmentProject Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Compliance Program DesignRisk-Based ControlsInvestigations and Root Cause AnalysisPolicy DevelopmentAuditing and Monitoring

Soft Skills

Strong JudgmentDecisiveness Under PressureCross-Functional CollaborationInfluencing Senior Stakeholders

Tools & Technologies

Compliance TechnologyAnalytics ToolsCase Management Tools

Certifications & Qualifications

CHCCHPCCCEPCIPP/USCIPMCFEPMP

Industry Keywords

HIPAAHITECHERISAACAState Privacy Laws

Tech Stack

Tools & technologies

PMP

About the role

Key responsibilities & impact

Lead and mature Gravie's healthcare compliance and privacy programs
Build and coach the Compliance Manager and Privacy Manager, who lead junior-level teams
Design, implement, and continuously improve the compliance program, including policies, training, monitoring, auditing, and reporting
Assess emerging healthcare regulatory and privacy risks and translate them into risk-based controls
Report program effectiveness, risks, and trends to executive leadership and the Board or Compliance Committee
Oversee HIPAA, state health privacy, consumer data privacy, policies, notices, and training
Direct privacy incident and breach response, including risk assessments and required notifications
Oversee privacy reviews of products, systems, vendors, data uses, privacy impact assessments, and business associate agreements
Oversee health plan member rights requests
Serve as a point of contact for privacy regulators and align privacy and security controls
Lead, develop, and hold managers accountable; establish priorities, division of work, resourcing, and succession planning
Build trusted cross-functional relationships and embed compliance and privacy into business decisions
Integrate compliance and privacy risks into the enterprise risk framework with Enterprise Risk Management and Internal Audit
Lead investigations, remediation, auditing, monitoring, hotline and case management, exclusion screening, and corrective action tracking
Develop metrics, dashboards, SLAs, reports, and quarterly presentations to the Compliance Committee
Manage relationships with regulators, external counsel, and auditors
Plan and deliver concurrent compliance and privacy initiatives, including policy overhauls, system implementations, audit remediation, and regulatory readiness efforts

Requirements

What you’ll need

Bachelor's degree in business or a related field
10+ years of professional experience in healthcare compliance, privacy, legal, risk, audit, or a related field
5+ years of experience building, leading, and coaching teams, including leading managers who lead junior-level staff
5+ years of experience building and sustaining cross-functional partnerships and influencing senior stakeholders
Project management experience leading and delivering complex, cross-functional initiatives
Strong judgment and decisiveness under uncertainty and time pressure
Working knowledge of ERISA, the ACA, the Consolidated Appropriations Act, IRS and DOL requirements for HRAs, and state TPA licensing and insurance laws
Working knowledge of HIPAA/HITECH, breach notification rules, and state privacy laws
Experience conducting investigations and root cause analysis
Preferred: MBA, JD, other advanced degree, or certifications such as CHC, CHPC, CCEP, CIPP/US, CIPM, CFE, or PMP
Experience in healthcare or a comparable regulated environment preferred
Experience leading compliance and privacy functions preferred
Experience scaling a compliance or privacy function preferred
Familiarity with compliance and privacy technology, analytics, and case management tools preferred
Authorization to work in the United States

Benefits

Comp & perks

Alternative medicine coverage
Flexible PTO
Up to 16 weeks paid parental leave
Paid holidays
401(k) program
Transportation perks
Education reimbursement
2 days of paid paw-ternity leave
Equity
Bonus