Compliance

• Lead and mature Product Security governance for internally developed customer-facing software, APIs, SDKs, integrations, and related services
• Define product scope, engagement criteria, review expectations, decision authorities, escalation paths, and evidence standards
• Develop and maintain standards, procedures, playbooks, templates, decision records, risk records, and supporting guidance
• Facilitate risk-based decisions involving security requirements, control applicability, exceptions, compensating controls, and accountability
• Align Product Security practices with enterprise architecture, application security, vulnerability management, risk, compliance, audit, and engineering processes
• Lead a scalable customer assurance model for applicable products and services
• Coordinate security summaries, whitepapers, assessment responses, and supporting evidence
• Partner with Product, Engineering, Risk, Compliance, Legal, Audit, and customer-facing teams on customer, deal, regulatory, and audit needs
• Lead Product Security coordination for applicable SOC 2 and related readiness activities
• Support system scoping, business-requirement validation, readiness evaluations, gap assessments, evidence coordination, and assessment-provider engagement
• Evaluate product security evidence from threat modeling, penetration testing, security scanning, software supply chain practices, secure development, incident management, and remediation
• Develop consolidated views of product security risk, control adoption, coverage, and assurance readiness
• Lead governance forums, readiness reviews, working sessions, and decision meetings
• Identify recurring themes and recommend scalable improvements
• Provide updates and recommendations to technical teams, business stakeholders, and senior leaders
• Contribute to Product Security strategy, planning, prioritization, and roadmap development
• Promote shared accountability for secure and trusted customer-facing products

Product Security Governance Principal

• Support all FMHC affiliates in coordinating and conducting consumer compliance reviews
• Provide guidance and responses to questions related to consumer protection laws across bank areas
• Assist with annual compliance risk assessments to determine yearly compliance reviews and audits
• Maintain current knowledge of applicable consumer protection laws and regulations, including proposed and amended regulations
• Assist in communicating regulatory changes and updating internal policies and procedures
• Support implementation of new laws and regulations through policy and procedure development
• Conduct compliance reviews with affiliates throughout the year
• Report compliance findings to business unit managers to support prompt corrective action
• Provide support to other compliance areas as needed

Consumer Compliance Analyst

• Perform complex professional and/or facility coding and documentation audits based on assigned specialties and/or Health System locations
• Review internal data reports to identify coding and documentation risks requiring audit
• Plan and conduct routine and moderately complex compliance audit reviews, including chart audits
• Evaluate accuracy of medical codes assigned to documented patient services and identify remedial or corrective actions
• Audit and monitor coding and documentation materials for compliance with laws, regulations, and contractual obligations
• Research and develop compliance tools and resources for internal use and employee publication
• Assist with UH initiatives as a team member
• Partner with employees, providers, medical staff, and management to review audit results and identify corrective actions
• Participate in annual risk assessments and identify risks and potential audits for the annual work plan
• Draft remedial or corrective action plans and verify risk mitigation
• Identify and implement Compliance & Ethics Department process improvements and lead assigned projects
• Prepare accurate documentation, records, findings, and recommendations
• Create and deliver coding and documentation education to prevent, mitigate, and remediate risk
• Perform other assigned duties
• Comply with policies and standards
• Safely and securely maintain patients' Protected Health Information (PHI)

Coding Compliance Analyst

• Conduct directed and prospective compliance reviews of research activities throughout the UH System
• Write focused and timely reports
• Ensure all reviews are appropriately completed
• Maintain current information regarding federal regulations, ethical considerations, UHCMC IRB and UH research policies related to protecting human research participants
• Identify opportunities for quality improvement
• Support the research community in conducting compliant research under applicable federal and institutional policies
• Support investigative processes when there are allegations of non-compliance
• Perform other duties as assigned

Research Compliance Specialist I

• Manage regulatory submissions, registrations, renewals, and related documentation for domestic and international markets.
• Provide regulatory guidance for product development, manufacturing, labeling, marketing, distribution, and market expansion activities.
• Create, maintain, and support technical documentation, product registrations, Declarations of Conformity, and regulatory files.
• Review product changes, labeling, marketing materials, and documentation for regulatory compliance.
• Monitor regulatory changes, assess business impact, and recommend process improvements.
• Represent Regulatory Affairs on project teams and provide regulatory expertise across the organization.
• Support risk assessments, product recalls, medical device reporting activities, and regulatory audits as needed.

Regulatory Affairs Specialist

• Manage and directly supervise assigned Ethics and Compliance Department staff
• Assist the Ethics and Compliance Program in satisfying the seven essential elements of an effective compliance program
• Assist the Senior Director Compliance and Chief Privacy Officer and/or compliance committee as needed
• Develop, review, and revise compliance policies and procedures, including the Code of Conduct
• Assist with developing and maintaining open lines of communication
• Develop, deliver, and/or manage specialized and general compliance training and education
• Respond to detected offenses
• Manage internal monitoring and auditing activities
• Assist with enforcement of disciplinary standards
• Use data, analytics, technology, and artificial intelligence tools responsibly to identify emerging risks, strengthen controls, evaluate program effectiveness, and guide health care compliance research functions and research institute stakeholders
• Manage and directly supervise assigned E&C staff, including multiple concurrent, time-sensitive, complex projects involving compliance program operations, investigations, and audits
• Assist the Director with department policy and procedure development and revision
• Prepare reports for senior management and the Ethics and Compliance Senior Leadership Committee Board
• Consult with the Director of Ethics and Compliance regarding hiring, training, development, and performance reviews of direct reports
• Collaborate with OhioHealth management teams throughout the health system to align compliance efforts with federal, state, and system requirements
• Perform special projects and other duties as assigned

Manager – Ethics & Compliance

• Assist with execution of multiple concurrent, complex, and time-sensitive compliance projects
• Draft and revise compliance policies and procedures, including compliance program policies and departmental procedures
• Draft and edit compliance publications, including OhioHealth's Code of Conduct, Ethics and Compliance eSource webpage content, articles, and other publications
• Assist with documenting the annual compliance risk analysis
• Assist with the annual compliance effectiveness review
• Develop compliance communications
• Oversee compliance exit interview processes
• Assist in managing the OhioHealth Hotline/Ethics and Compliance Hotlink, including assigning reported matters and preparing related reports
• Assist subject matter experts with reviewing and revising general and specialized compliance training and education modules
• Prepare reports and provide support for the Ethics and Compliance Senior Leadership Committee Board
• Prepare committee meeting materials, minutes, and other reports
• Perform other duties assigned by compliance leadership
• Support safety, quality, and efficiency as part of a High Reliability Organization

Senior Ethics and Compliance Analyst

• Lead and develop a data security governance team responsible for database activity monitoring, centralized encryption key management, certificate lifecycle management, hardware security module support, and encryption and masking governance
• Direct database activity monitoring capabilities, including alert tuning, detection methodology, monitoring use cases, whitelist governance, session monitoring, deployment support, and production issue resolution
• Establish data protection requirements, governance expectations, control considerations, and implementation guidance aligned with enterprise security standards and risk management objectives
• Manage centralized encryption key management governance, including key request approvals, lifecycle oversight, key health monitoring, failover planning, automation improvements, and application team support
• Oversee certificate lifecycle management, including enrollments, renewals, re-issuances, revocations, expiration monitoring, outage prevention, certificate authority relationships, and industry-standard alignment
• Provide governance and operational oversight for hardware security module capabilities, including Atalla support, master key management, security policy configuration, cryptographic key generation, and control procedures
• Improve understanding and governance of cryptographic assets, including keys, certificates, services, algorithms, dependencies, ownership, and lifecycle considerations
• Drive a post-quantum cryptography readiness program covering inventory, prioritization, stakeholder engagement, governance requirements, migration planning, and capability development
• Collaborate with Security Architects to maintain a team capabilities roadmap aligned with enterprise security priorities and future-state data protection needs
• Provide oversight for data encryption and masking governance, including field-level encryption, key management requirements, application encryption processes, and control procedures
• Partner with Security Engineering, Cyber Defense, Cloud, Infrastructure, application teams, DAO stakeholders, vendors, and business partners on data security controls and remediation
• Develop governance procedures, metrics, reporting, and executive-ready updates demonstrating control effectiveness, operational health, risk reduction, and program maturity
• Support audit, regulatory, risk, and compliance inquiries with evidence of control design, operating effectiveness, issue remediation, and adherence to internal standards
• Drive continuous improvement through automation, process maturity, service reliability, documentation quality, and scalable data security tools and operating models

Data Security Governance Manager

• Manage and oversee projects, initiatives, regulatory audits or exams, internal audits, accreditations, on-site reviews, and risk assessments
• Plan audits, conduct mock audits and audit training, manage audit evidence preparation, and assess audit preparedness
• Establish project plans, gap analyses, milestone dates, and other significant project aspects
• Provide leadership updates
• Maintain knowledge of laws, regulations, and company strategies to assess impact
• Consult with clients as a subject matter expert
• Conduct complex investigations
• Document findings and ensure corrective actions are completed
• Interface with external clients, regulators, vendors, suppliers, internal stakeholders, and senior management
• Support foundational and strategic compliance responsibilities for the team and management
• Work in a hybrid Ohio-based arrangement with in-office attendance 1–2 days per week

Compliance Manager

• Support the day-to-day operation of River’s compliance, fraud, sanctions, complaints, and dispute programs
• Use data analysis to identify trends in client activity, surface risk, and identify operational gaps
• Own operational improvements to River’s compliance tooling and workflows by identifying inefficiencies and supporting data-driven changes
• Collaborate with Product and Engineering to improve and automate compliance operations to facilitate River’s growth
• Execute and enhance River’s compliance program policies, procedures, and controls
• Partner with Client Services and Finance to support investigations and recommend appropriate risk-based resolutions
• Conduct compliance-related outreach to clients while balancing regulatory requirements with a high-quality customer experience
• Support regulatory examinations, audits, and responses to legal and law enforcement inquiries
• Report to River’s leadership on compliance program trends, progress, and developments