Director of Compliance

About the Role

The Director of Compliance is responsible for designing, overseeing, and monitoring the effectiveness of Commure, Inc.’s corporate compliance program. This role is critical in promoting a culture of integrity and ensuring the company adheres to the complex web of laws, regulations, and standards governing the Health IT industry. This role will function as an independent and objective leader, reviewing and evaluating compliance issues throughout the organization. They will monitor systems and processes to ensure compliance with all applicable healthcare laws, data privacy regulations, and company policies, including the Code of Conduct.

What You'll Do

• Knows, understands, and champions Commure’s mission, vision, and values through leadership behaviors, practices, and decisions.

• Chairs the Corporate Compliance Committee, ensuring regular meetings with appropriate cross-functional representation from Legal, Human Resources, Engineering, Product, Security, and Sales.

• Develops, implements, and maintains policies, procedures, and controls for the compliance program to prevent and detect illegal, unethical, or improper conduct, with a strong focus on Health IT-specific risks.

• Conducts regular, comprehensive risk assessments to identify potential areas of compliance vulnerability, including those related to HIPAA/HITECH, data security, the Anti-Kickback Statute, Stark Law, information blocking, and FDA regulations for Software as a Medical Device (SaMD).

• Develops, implements, and tracks corrective action plans to resolve compliance issues, providing guidance to prevent future occurrences.

• Establishes and executes an annual compliance work plan based on risk assessment results, including targeted auditing and monitoring activities.

• Develops and reports on key compliance metrics and data analytics to senior leadership and the Audit Committee of the Board, detecting potential fraud, waste, abuse, and other aberrant patterns.

• Directs and oversees the creation and delivery of effective compliance training and educational materials for all employees, executives, board members, and key vendors, focusing on the real-world application of compliance principles to Commure's business model.

• Manages and promotes effective lines of communication, including the company’s compliance hotline, ensuring a safe and anonymous channel for reporting concerns.

• Monitors the performance and effectiveness of the compliance program on an ongoing basis and implements continuous improvements.

• Maintains expert knowledge of the evolving healthcare regulatory landscape and advises the company on the potential impact of new laws and regulations.

• Liaises with senior management to ensure a strong "tone at the top," integrate compliance activities into business operations, and evaluate the compliance-related performance of employees.