Vice President, Compliance and Privacy

Who We Are

Machinify is a leading healthcare intelligence company with expertise across the payment continuum, delivering unmatched value, transparency, and efficiency to health plan clients across the country. Deployed by over 60 health plans, including many of the top 20, and representing more than 160 million lives, Machinify brings together a fully configurable and content-rich, AI-powered platform along with best-in-class expertise. We're constantly reimagining what's possible in our industry, creating disruptively simple, powerfully clear ways to maximize financial outcomes and drive down healthcare costs.

Location: This role is full remote

About the Opportunity

At Machinify, we're constantly reimagining what's possible in our industry-creating disruptively simple, powerfully clear ways to maximize our clients' financial outcomes today and drive down healthcare costs tomorrow. As part of the Legal Department, youwill oversee Machinify's Compliance and Privacy Functions, developing policies and ensuring compliance with healthcare and technology laws. The role, reporting to the General Counsel and Chief Compliance Officer, manages and is responsible for Machinify's Corporate Compliance program, including internal investigations and customer contract compliance, as well as Machinify's Privacy program, including privacy compliance, data governance and strategy, privacy incident management and response, artificial intelligence governance and ethics, and cybersecurity law.

What you'll do

• Policy Development: develop and oversee implementation of policies with respect to US healthcare corporate compliance, anti-bribery, anti-corruption, privacy compliance, privacy management, and data governance.
• Monitor environment: monitor regulatory, legislative and enforcement landscape to guide internal practices and policies.
• Internal Investigations and Audits: oversee Machinify's internal investigations and monitor compliance with applicable policies.
• Enterprise Risk Management: oversee enterprise risk management to identify areas of potential compliance vulnerability and risk, develop and implement corrective action plans.
• Compliance Communication Program: institute and maintain an effective compliance communication program, including promoting: (a) use of a compliance hotline; (b) heightened awareness of Code of Conduct, and (c) understanding of new and existing compliance issues and related policies and procedures.
• Healthcare Compliance: update Machinify policies to address healthcare compliance requirements from customer contracts.
• Data Privacy and Data Protection Program: lead program that defines, updates, maintains, and strengthens privacy compliance program requirements.
• Data Strategy: execute on the implementation of key privacy controls and business processes that are foundational to the Company's data strategy, including de-identification, real world data, and artificial intelligence.
• Privacy Operations: facilitate compliance with privacy frameworks, such as NIST and HIPAA, and incorporation of privacy by design into new products, business operations, and business verticals.
• Product Development: drive cross-functional strategic relationships with stakeholders and business teams to collaborate on integrating privacy into product development and business processes.
• Stakeholder Engagement: counsel internal clients on a wide range of privacy matters, including permissible data uses for strategic initiatives and the application of privacy laws and regulatory guidance to current business processes, new product development, research collaborations and commercial partnerships.
• Commercial Collaborations: counsel corporate legal and business team in negotiating data use and data protection terms in complex commercial agreements, vendor agreements, business associate agreements, and data sharing agreements.
• Investigations and Training: investigate, analyze, track, manage, and remediate privacy incidents; and develop policies and procedures, privacy training, and awareness activities to continuously advance the privacy program.
• Audit Committee: report compliance and privacy dashboards and program reviews to the Audit Committee.
• Cybersecurity Law: work closely with the Chief Information Security Officer, lead collaboration with Information Security on various data security initiatives, risk management, third party audits/certifications, and vendor assessments.

What experience you bring (Role Requirements)

• 10+ years of Compliance and Privacy experience in in-house life sciences or healthcare companies, relevant law firm experience, and/or government experience.
• Knowledge of compliance and data privacy laws and standards, including but not limited to Sunshine Act, OIG HHS Compliance Program Guidance, HIPAA, NIST, and state privacy laws.
• A US based law degree from accredited law school or equivalent and active member of a US state bar or registration as in-house counsel is preferred but not required.
• Excellent communication skills and the ability to convey complex legal issues clearly.
• A desire to be part of a high-growth, transformational company.
• Proven track record of success in building and leading high-performing teams and solid managerial experience at the executive level.

Pay range: $275,000 - $300,000 USD

This is an exempt position. For Salary position only: The salary range is for Base Salary.Compensation will be determined based on several factors including, but not limited to, skill set, years of experience, and the employee's geographic location.

What's in it for you

• PTO, Paid Holidays, and Volunteer Days
• Eligibility for health, vision and dental coverage, 401(k) plan participation with company match, and flexible spending accounts
• Tuition Reimbursement
• Eligibility for company-paid benefits including life insurance, short-term disability, and parental leave.
• Remote and hybrid work options

At Machinify, we're reimagining a simpler way forward. This begins with our employees. We are innovators who value integrity, teamwork, accuracy, and flexibility. We do the right thing, and we listen to the needs of our clients and their members. As tenured experts with unmatched experience, we champion diverse perspectives that help us to better understand and serve our clients.

Our values come to life through our culture. We embrace flexible working arrangements that allow our employees to bring innovation to life in the way that best suits their productivity. We work cross-functionally, abandoning silos, to bring innovative, accurate solutions to market. We invest in each other through ongoing education and team celebrations, and we give back to our communities through dedicating days for volunteering. Together, Machinify is making healthcare work better for everyone, and we're passionate about a future with better outcomes for all.

We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, or veteran status. We are proud to be an equal opportunity workplace. Machinify is an employment at will employer.