Company Description: Harmony Healthcare IT (HHIT) is a data management firm that moves and stores patient employee and business records for healthcare organizations. To strengthen care delivery and improve lives vital information is preserved and managed by HHIT in a way that keeps it accessible releasable usable interoperable secure and compliant. HHIT has established core values for the workplace. This helps to maintain a culture of excellence and provides guidance in our daily work. HHITs core values are: - Do the right thing
- Be easy to work with
- Exceed expectations
- Serve humbly
- Never stop improving
Position Summary: The Director of Governance and Compliance serves as the organizations authority on governance risk and compliance with full accountability for owning and safeguarding all data within the HHIT environment and alignment with frameworks. This role ensures that every aspect of data management aligns with the organizations policies regulatory requirements and ethical standards while fostering a culture of transparency and accountability. The Director of Governance and Compliance should bring a mix of technical expertise strategic thinking and leadership skills. Primary Responsibilities: - Enterprise Data Governance Framework Development & Enforcement
- Standards for data hosting tagging quality classification retention and disposal of Customer Data
- Retention Schedule for business records
- Audit Framework Compliance HITRUST HIPAA and any other framework
- Responsible for HHIT achieving and maintaining compliance
- Vanta Product Owner
- Collaboration & Business Enablement
- Partner with business and technology stakeholders to promote data ownership & stewardship
- Facilitate data governance councils & working groups
- Drive adoption of data governance tools and best practices
- Risk Management
- Identify & mitigate data-related risks raising awareness according to the level of risk to the appropriate stakeholders up to and including executive management
- Escalation & collaboration with Human Resources to implement corrective actions and operating changes based on policy / standard operating procedures violations or gaps
- Implement controls for data privacy and security in collaboration with Security Privacy & Legal teams
- Training & Awareness
- Responsible for training & awareness programs of audit programs frameworks data governance
- Other duties as assigned
Required Skills/Abilities: - Deep Regulatory Knowledge Understand laws regulations and industry standards
- Governance Framework Expertise Design and implement governance structures and policies
- Risk Management Skills Identify assess and mitigate compliance risks effectively
- Internal Controls Oversight Develop and monitor robust internal control systems
- Strategic Thinking Align compliance and governance with organizational goals
- Leadership & Influence Lead teams and drive a culture of integrity
- Ethical Judgment Model and enforce high ethical standards
- Clear Communication Explain complex regulations to diverse stakeholders
- Collaboration Ability Work across departments and with external partners
- Adaptability & Tech Awareness Respond to regulatory changes and emerging tech risks
- Experience with Microsoft 365 including Teamsintegration
Education & Experience:- Bachelors degree in business finance accounting law or related field
- Professional certifications (e.g. CISA CCEP CRCM CISSP) enhance credibility and expertise
- 710 years in governance risk compliance regulatory affairs or related roles
- Hands-on audit and internal controls experience including SOC 1/2 PCI preferably HITRUST
- Proven leadership in developing compliance programs training and leading teams
- Cross-functional collaboration with legal finance IT HR and external regulators
- Industry-specific regulatory knowledge especially in healthcare and technology
- Strategic and risk management skills including risk assessments and developing mitigation strategies
Other: - Willing and ready to exemplify HHITs core values on a daily basis
- Responsible for protecting data entrusted to HHIT by customers or other parties by strictly adhering to HHITs data security and privacy policies and procedures as well as HIPAA PIPEDA and all other applicable law.
- Speaking and writing English is a requirement for this position
- Must be authorized to work in the United States
Physical Requirements: - Prolonged periods sitting at a desk and working on a computer
- Must be able to lift up to 15 pounds at times
| Required Experience:
Director
Company Description:Harmony Healthcare IT (HHIT) is a data management firm that moves and stores patient employee and business records for healthcare organizations. To strengthen care delivery and improve lives vital information is preserved and managed by HHIT in a way that keeps it accessible rele...
Company Description: Harmony Healthcare IT (HHIT) is a data management firm that moves and stores patient employee and business records for healthcare organizations. To strengthen care delivery and improve lives vital information is preserved and managed by HHIT in a way that keeps it accessible releasable usable interoperable secure and compliant. HHIT has established core values for the workplace. This helps to maintain a culture of excellence and provides guidance in our daily work. HHITs core values are: - Do the right thing
- Be easy to work with
- Exceed expectations
- Serve humbly
- Never stop improving
Position Summary: The Director of Governance and Compliance serves as the organizations authority on governance risk and compliance with full accountability for owning and safeguarding all data within the HHIT environment and alignment with frameworks. This role ensures that every aspect of data management aligns with the organizations policies regulatory requirements and ethical standards while fostering a culture of transparency and accountability. The Director of Governance and Compliance should bring a mix of technical expertise strategic thinking and leadership skills. Primary Responsibilities: - Enterprise Data Governance Framework Development & Enforcement
- Standards for data hosting tagging quality classification retention and disposal of Customer Data
- Retention Schedule for business records
- Audit Framework Compliance HITRUST HIPAA and any other framework
- Responsible for HHIT achieving and maintaining compliance
- Vanta Product Owner
- Collaboration & Business Enablement
- Partner with business and technology stakeholders to promote data ownership & stewardship
- Facilitate data governance councils & working groups
- Drive adoption of data governance tools and best practices
- Risk Management
- Identify & mitigate data-related risks raising awareness according to the level of risk to the appropriate stakeholders up to and including executive management
- Escalation & collaboration with Human Resources to implement corrective actions and operating changes based on policy / standard operating procedures violations or gaps
- Implement controls for data privacy and security in collaboration with Security Privacy & Legal teams
- Training & Awareness
- Responsible for training & awareness programs of audit programs frameworks data governance
- Other duties as assigned
Required Skills/Abilities: - Deep Regulatory Knowledge Understand laws regulations and industry standards
- Governance Framework Expertise Design and implement governance structures and policies
- Risk Management Skills Identify assess and mitigate compliance risks effectively
- Internal Controls Oversight Develop and monitor robust internal control systems
- Strategic Thinking Align compliance and governance with organizational goals
- Leadership & Influence Lead teams and drive a culture of integrity
- Ethical Judgment Model and enforce high ethical standards
- Clear Communication Explain complex regulations to diverse stakeholders
- Collaboration Ability Work across departments and with external partners
- Adaptability & Tech Awareness Respond to regulatory changes and emerging tech risks
- Experience with Microsoft 365 including Teamsintegration
Education & Experience:- Bachelors degree in business finance accounting law or related field
- Professional certifications (e.g. CISA CCEP CRCM CISSP) enhance credibility and expertise
- 710 years in governance risk compliance regulatory affairs or related roles
- Hands-on audit and internal controls experience including SOC 1/2 PCI preferably HITRUST
- Proven leadership in developing compliance programs training and leading teams
- Cross-functional collaboration with legal finance IT HR and external regulators
- Industry-specific regulatory knowledge especially in healthcare and technology
- Strategic and risk management skills including risk assessments and developing mitigation strategies
Other: - Willing and ready to exemplify HHITs core values on a daily basis
- Responsible for protecting data entrusted to HHIT by customers or other parties by strictly adhering to HHITs data security and privacy policies and procedures as well as HIPAA PIPEDA and all other applicable law.
- Speaking and writing English is a requirement for this position
- Must be authorized to work in the United States
Physical Requirements: - Prolonged periods sitting at a desk and working on a computer
- Must be able to lift up to 15 pounds at times
| Required Experience:
Director
View more
View less