Regulatory Compliance Manager/Attorney

Job Summary:

CIVHC is looking for a Regulatory Compliance Manager or Regulatory Compliance Attorney to lead and oversee CIVHC’s regulatory compliance with applicable state and federal laws, partner with internal departments and external agencies and organizations on compliance related matters, and continually monitor and assess the external data privacy landscape to assist CIVHC with the responsible and ethical use of health care data. This role supports CIVHC’s strategic and operational priorities by proactively managing regulatory compliance risks and issues, assisting with legal and policy interpretation as well as contractual obligations, and ensuring adherence to complex frameworks related to data privacy, health law, and transparency. This position plays a key role in developing and enhancing compliance to support the ethical and legal use of sensitive health care data in alignment with CIVHC’s mission.

Working closely within the Legal and Compliance Department as well as other departments, teams, and leaders across the organization, this position ensures CIVHC remains a trusted steward of health care data while fostering a culture of integrity, accountability, and continuous improvement at every level.

Supervisory Responsibilities:

• None at present.  However, as CIVHC continues to grow, there is the possibility in the future that this position will supervise employees.  

Duties/Responsibilities/Essential Functions:

• Leads and oversees CIVHC’s regulatory compliance program ensuring that CIVHC is in compliance with HIPAA, HITECH, 42 CFR Part 2, TEFCA, ERISA, antitrust laws, and all other applicable federal and Colorado privacy laws and health care regulations.
• Ensures regulatory compliance with the Colorado All Payer Claims Database (CO APCD) statute and the rules and regulations of Colorado Medicaid (Colorado Department of Health Care Policy and Financing), Medicare (Centers for Medicare and Medicaid Services), and the Colorado Division of Insurance. Will work closely and establish relationships with these Federal and State agencies as well as the Colorado Attorney General’s office. 
• Monitors and analyzes proposed and enacted state and federal legislation, regulations, and rules impacting CIVHC, the CO APCD, and health data organizations.  Provides analysis and guidance to internal partners.  
• Manages and responds to requests for information from State and Federal Agencies and provides comments on federal and state regulatory changes as needed in coordination with CIVHC’s internal departments, external partners, and government relations contractors.  
• Will coordinate and establish relationships with CIVHC’s government relations contractors and external federal and state regulatory agencies.  
• May assist with all phases of contract management. 
• Works closely with the Data Solutions Department and Information Security Systems Officer (ISSO) to ensure robust system security in compliance with frameworks and best practices are in place for CIVHC and as it relates to Data Management Plans for CIVHC’s clients.
• Managing the Qualified Entity Certification Program for CIVHC (will be trained on this work upon starting employment with CIVHC).   
• Works collaboratively with other members of the Legal and Compliance Department to achieve the Department’s goals, objectives, and projects, to meet or exceed Key Performance Indicators, and to contribute to CIVHC’s overall mission and values. 
• Provides guidance, analysis, and support on compliance matters and issues, including but not limited to interpretation of complex health care regulations, artificial intelligence (AI), data innovation, state and federal transparency efforts, and policies and procedures. 
• Conducts external audits and investigations to ensure compliance with CIVHC’s requirements and documents findings and guidance in a clear and compliant manner.  May assist with the Legal and Compliance Department’s internal audits. 

Additional responsibilities for Regulatory Compliance Attorney (with supervision and direction by the Vice President of Legal and Compliance, General Counsel): 

• Responsible for all phases of contract management including but not limited to: reviewing, negotiating, and drafting various types of contracts such as vendor agreements, SAS and IT agreements, data use agreements, multi-jurisdictional agreements, and leases; interpreting contract language for regulatory compliance issues; providing analysis and recommendations to internal departments; and monitoring and auditing contractual requirements. 
• Will work with and manage outside counsel as needed regarding litigation, IP, tax, and other legal expertise and special projects as needed. 
• Will provide legal advice and guidance to Human Resources on employment related matters and issues.  
• Will assist with all government audits, complaints, and investigations as needed.
• Will monitor and assist with corporate compliance activities including but not limited to corporate documentation, state filings, Board of Directors’ governance and training, and insurance renewals.  

Training, Communication, & Reporting

• As part of the Legal and Compliance Department, develops and implements employee training and presentations on topics including but not limited to privacy, ethics, policies, best practices, and other laws and topics as requested.
• Provides updates and strategic guidance to the Executive Leadership Team, Senior Leadership Team, and other departments and teams on regulatory changes, risk areas, compliance trends and issues, and other topics as requested.

Projects

• Contributes to strategic initiatives and cross-functional special projects as assigned by the Vice President of Legal and Compliance, General Counsel. 
• Assists with other Legal and Compliance Department efforts, work, and projects as needed and assigned by the Vice President of Legal and Compliance, General Counsel.

Required Skills/Abilities: 

• Strong analytical and problem-solving skills, with the ability to assess complex regulatory requirements.
• Ability to develop practical and proactive solutions while also demonstrating flexibility and creative thinking in various situations.  
• Exceptional written and verbal communication skills, with the ability to clearly convey technical and regulatory concepts to diverse audiences in a clear and concise manner.
• Proven ability to build effective cross-functional relationships and collaborate with external and internal partners at all levels.
• High attention to detail and strong organizational skills to manage multiple priorities, projects, and deadlines.
• Ability to conduct external audits and lead investigations.
• Strong facilitation and training delivery skills.
• Proficiency in Microsoft Office 360 programs and experience with compliance tracking or workflow systems.
• Ability to work independently and exercise sound judgment in high-stakes or ambiguous situations.

Education and Experience Requirements:

• For Regulatory Compliance Manager: 
  • Bachelor’s degree in a business, pre-law, public health, health policy, or health care or compliance related field; In lieu of education, 5 years of progressive experience in regulatory compliance, legal, or risk management roles (preferably in health care, nonprofit, or data-intensive environments) will be accepted.
  • Advanced knowledge of laws and regulations including but not limited to HIPAA, HITECH, 42 CFR Part 2, TEFCA, ERISA, Medicaid, Medicare, antitrust laws, and all other applicable federal and Colorado privacy laws and health care regulations.
  • Certification in health care compliance (e.g., CHC, CHPC, CIPP) or Master of Studies in Law strongly preferred.
  • 0-3 years of compliance experience (preferably focused on health care). 
• For Regulatory Compliance Attorney: 
  • Juris Doctorate from an American Bar Association accredited law school;
    • Health Law Certificate strongly preferred. 
  • License to practice law in Colorado (or ability to gain license to practice law in Colorado within 6 months to 1 year of employment start date).         License must be in good standing with the Colorado Supreme Court.     
  • Advanced knowledge of laws and regulations including but not limited to HIPAA, HITECH, 42 CFR Part 2, TEFCA, ERISA, Medicaid, Medicare, antitrust laws, and all other applicable federal and Colorado privacy laws and health care regulations.
  • 0-3 years of practicing law (preferably in a law firm or in-house position focused on health care).  

Salary Range: 

• Regulatory Compliance Manager Salary Range: $65,000.00-$85,000.00 
• Regulatory Compliance Attorney Salary Range: $95,000.00-$115,000.00

Physical Requirements: 

• Sitting for extended periods of time.
• Using a computer and keyboard for typing and data entry.
• Reaching and stretching to access files or equipment.
• Lifting and carrying light objects such as papers, office supplies, and computer equipment.
• Walking short distances within the office environment.
• Operating office equipment such as printers, copiers, and fax machines.
• Occasionally bending or stooping to retrieve items from lower shelves or cabinets.
• Maintaining good posture to prevent discomfort or strain.
• Using a telephone or headset for communication.
• Ability to focus and concentrate for prolonged periods.

Other duties:

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.  In the sole discretion of CIVHC, upon successful completion of various requirements, duties, tasks, and developmental milestones as outlined in the Offer Letter for this position, this position may have career progression to become the Director of Regulatory Compliance in the future.  

Position Timeline:

Our target is to fill this position by August 31 , 2025. Application review will begin immediately and will continue on a rolling basis until the position is filled. We encourage interested candidates to apply as soon as possible for full consideration.

Compensation and Benefits:

The salary range for this position is based on relevant experience, education, and internal equity. CIVHC offers a comprehensive benefits package including medical, dental, and vision coverage; paid time off; life and disability insurance; and retirement plan contributions.

Equal Opportunity Employer:

CIVHC is proud to be an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, disability, age, or any other legally protected status.