Chief Compliance & Privacy Officer

The Chief Compliance and Privacy Officer (CCPRCO) is accountable for the integrity, ethics, privacy, and research compliance program across Tamp General Hospital System — including hospital operations, ambulatory/medical group, academic affiliations, sponsored research, and clinical trials. Reports directly to an Executive Vice President and Board Audit & Compliance Committee.

Essential Functions:

• Lead the Enterprise Compliance Program across the AMC system — hospital, medical group, research enterprise, and academic affiliations — ensuring alignment with the OIG's 7 elements of an effective compliance program.
• Serve as principal compliance advisor to the CEO, Cabinet, and Board Audit & Compliance Committee, delivering reporting, risk updates, and executive-session briefings.
• Direct the enterprise HIPAA Privacy & Security Program in partnership with the Chief Information Security Officer (Cyber Security), including breach risk assessments, OCR response, patient rights, and data-sharing governance.
• Oversee the Research Compliance Program, including human subjects protections (Common Rule), FDA GCP, IRB liaison, NIH/PHS conflict of interest, clinical trial billing (Medicare Coverage Analysis), and research misconduct procedures.
• Lead the annual enterprise compliance risk assessment and work plan, translating regulatory change and audit findings into a prioritized, board-approved roadmap.
• Lead internal investigations and government inquiry response — OIG, DOJ, CMS, OCR, FDA, state AG — including disclosures (SRDP, OIG SDP) and Corporate Integrity Agreement (CIA) management.
• Oversee coding, billing, and reimbursement integrity programs, including charge audits, payer audit defense, Stark/Anti-Kickback compliance, 340B, and EMTALA monitoring.
• Direct the Code of Conduct, ethics hotline, and policy architecture, ensuring consistent standards, enterprise training (≥98%25 completion), and a strong speak-up culture.
• Partner across the system with internal and external stakeholders to embed compliance into clinical, academic, and operational decision-making.

• Master's Degree in Business, Health Administration, Nursing, or Doctorate Degree (JD, MD, PhD).
• Certification in Healthcare Compliance, Healthcare Privacy Compliance, Healthcare Research Compliance, or Compliance & Ethics Professional.

Skills & Abilities:

• Deep Regulatory Expertise — Comprehensive command of HIPAA Privacy/Security, Stark Law, Anti-Kickback Statute, False Claims Act, EMTALA, 340B, CMS Conditions of Participation, and state healthcare regulations. 
• Research Compliance — Working Knowledge of the Common Rule, FDA GCP, NIH/PHS FCOI, AAHRPP accreditation standards, IRB/IACUC oversight, export controls, and clinical trial transparency requirements. 
• Investigations & Enforcement Acumen — Proven ability to lead complex internal investigations, manage CIAs, OIG/DOJ/OCR/FDA inquiries, and execute voluntary disclosures with sound legal and ethical judgment. 
• Risk Assessment & Data Analytics — Skilled in enterprise risk methodology, compliance auditing, hotline trend analysis, and use of data analytics/AI tools to detect, monitor, and report compliance risk. 
• Executive Communication & Board Governance — Ability to translate complex regulatory matters into clear, actionable guidance for the Board, CEO, Deans, faculty, and clinicians, with strong written, verbal, and presentation skills. 
• Matrixed Leadership in Academic-Clinical Environments — Demonstrated ability to influence without authority across affiliated universities, faculty practice plans, GME programs, and physician enterprises, balancing independence with collaboration. 
• Program Building & Talent Development — Skilled at designing scalable compliance infrastructure, policy frameworks, training programs, and leading multidisciplinary teams in a complex AMC system.