This role is responsible to oversee business operations to assist with regulatory compliance, external assessments and audits, incident management, policy and procedures, and to provide Healthcare training material to employees.

To be successful in this role, you should possess extensive experience in advising organizations on industry requirements and standards. Accomplished Compliance Analysts are regulatory experts who lead their organizations toward excellence in compliance.

ESSENTIAL FUNCTIONS & RESPONSIBILITIES:

• Responsible for implementing, maintaining, and improving policies, procedures, and internal controls to assure compliance with applicable regulatory and legal requirements, industry standards and best practices, organizational values, and strategic goals.

• Coordinate, manage and guide the business in maintaining HITRUST certification.

• Serve as the primary liaison with internal and external resources in conducting compliance audits and risk assessments.

• Develop and document security risk assessment processes for assessing internal practices and vendors.

• Participate in cloud and application security strategic planning and execution.

• Provide compliance guidance on new product features, deviations, and changes in the infrastructure.

• Proactively identify issues by assessing the current environment, processes and anticipating future enhancements/requirements.

• Drive improvements in existing processes and develop new innovative and efficient solutions.

• Review complex business processes, systems, workflows, SOPs, and policies to identify, document, and elevate potential risks that may be non-compliant with contracts and/or regulatory requirements.

• Communicate gaps to management and coordinate cross functional team meetings to remediate and close the control gaps.

KNOWLEDGE & SKILLS:

• Knowledgeable in Healthcare regulatory laws and frameworks: CMS (Medicare, Medicaid), HIPAA, NIST and HITRUST
• Exceptional ability to formulate compliance policies, procedures, and related documentation
• Strong organizational, written and verbal communication skills
• Computer proficiency and technical aptitude a plus

EDUCATION & EXPERIENCE:

• 5 years of professional experience in executing and organizing audits, certification programs and control assessments, including, but not limited to the compliance control lifecycle, analyzing control processes, scope planning, policies and standards, control testing and mapping issues to risks

• Experience with control frameworks including related regulatory compliance requirements (e.g., SOC, SOX, HITRUST, HIPAA, FedRAMP, PCI) required

• BS degree in Business or Management Information Systems or related field OR equivalent work experience.

• CISSP, GSEC, CISM or other related certifications a plus

About CERiS

CERiS, a division of CorVel Corporation, a certified Great Place to Work® Company, offers incremental value, experience, and a sincere dedication to our valued partners. Through our clinical expertise and cost containment solutions, we are committed to accuracy and transparency in healthcare payments. We are a stable and growing company with a strong, supportive culture along with plenty of career advancement opportunities. We embrace our core values of Accountability, Commitment, Excellence, Integrity and Teamwork (ACE-IT!).

A comprehensive benefits package is available for full-time regular employees and includes Medical (HDHP) w/Pharmacy, Dental, Vision, Long Term Disability, Health Savings Account, Flexible Spending Account Options, Life Insurance, Accident Insurance, Critical Illness Insurance, Pre-paid Legal Insurance, Parking and Transit FSA accounts, 401K, ROTH 401K, and paid time off.

CorVel is an Equal Opportunity Employer, drug free workplace, and complies with ADA regulations as applicable.