Director of Corporate Compliance

To provide high quality, acute care for adults struggling with mental health issues or mental health co-occurring disorders. It’s Hickory’s primary goal to offer expert treatment for all we serve. 

• Bachelor’s degree in healthcare administration, business, nursing, health information management, law, or a related field required; master’s degree or JD preferred.
• Minimum 5 years of progressive healthcare compliance experience spanning privacy, FWA/billing, and/or risk and monitoring, including leadership or supervisory experience; behavioral health or SUD treatment experience strongly preferred.
• Certified in Healthcare Compliance (CHC) required, or required within 12 months of hire; CHPC, CHRC, or CCEP preferred.
• Coordinating multiple projects and managing complex documentation preferred.
• Exceptional communication, strategic thinking, and change‑management skills.
• Strong understanding of compliance, security, and HIPAA regulations.
• Ability to occasionally travel to company facilities for audits, projects, training, or operational support.
• Ability to maintain the confidentiality of protected health information and SUD treatment records in accordance with HIPAA and 42 CFR Part 2.

• →Oversee the privacy program, HIPAA and 42 CFR Part 2 compliance, breach/incident response, and consent and redisclosure governance.
• →Direct the HIPAA & Privacy Compliance Committee and partner with the CISO/IT on security risk analysis and safeguards (cybersecurity liaison).
• →Ensure access auditing, minimum-necessary practices, and workforce privacy training.

• →Supervises the Health Information Management function and risk/analytics staff as assigned, including direction, coaching, workload prioritization, and performance management. Coordinates matrixed work with In-house Counsel (FWA) and the Compliance Manager (Compliance Operations).

• Oversee the FWA and revenue-integrity program, coding and billing compliance, and overpayment identification (including the 60-day rule).
• Direct anti-kickback and Stark compliance review and self-disclosure coordination in partnership with Legal.
• Ensure proactive detection, root-cause analysis, and timely remediation of identified issues.

• Own the enterprise compliance risk assessment and risk register (with Ankura), ensuring the register drives the annual work plan.

• Identify emerging risks and regulatory developments and escalate to the Chief Compliance Officer.

• Lead, develop, and supervise assigned staff (including Health Information Management) and manage external partners (e.g., Ankura), coordinating matrixed work with Legal and Compliance Operations.
• Execute assigned elements of the annual risk-based compliance work plan and report effectiveness measures to the CCO and Compliance Committee.
• Support board reporting, auditing, investigations, and corrective action as they relate to these functions.
• Deputize for the Chief Compliance Officer on assigned matters.

https://hickorytreatmentcenters.com/