Position Summary: Provide assurance that internal controls and business processes are effective and operating as planned. Evaluate compliance with Federal/ State government guidelines and the company’s policies and programs in relationship to those standards. Assist business groups in their coding and billing, privacy, and other audit and compliance efforts and achieving process / control improvements assurances to external auditors and regulators. Provide oversight to the HIPAA Privacy program and Board of Directors Audit Committee processes. Education, License & Cert: BA/ BS in Healthcare Administration/Accounting or related field. Master’s degree preferred. Experience: At least 5 years previous internal audit/compliance experience. Professional certification in healthcare, management, or accounting disciplines is preferred. PC literate with MS Office applications. Risk assessment knowledge. Strong (English) verbal and written communication skills. The ability to manage multiple projects. Must have sound reasoning, investigative and problem‐solving skills. Must have the ability to travel. Essential Functions: 1. Assist in conducting annual business group risk assessments including financial, non‐financial and fraud risk areas. 2. Execute assigned Internal Audit / Compliance projects. 3. Administer Federal and HIPAA Privacy Programs. Partner with HIPAA Security Officer to ensure HIPAA Risk Assessment compliance. Assist Security Officer in HITRUST evaluation and process improvements. 4. Prepare audit programs and procedures for executing Internal Audit/Compliance projects. 5. Plan and communicate annual Compliance Work Plan objectives. 6. Conduct evaluations of Internal Audit / Compliance projects. 7. Administers the Compliance Hotline program. Administers the Electronic Privacy programs. 8. Conduct project close conferences ensuring understanding and acceptance of project results. 9. Provide guidance to Sr. Leadership team and Executive Compliance Committee related to Compliance and Privacy topics 10. Provide leadership to employees of Internal Audit and Compliance Departments, includes Budget management, HR hiring and management, and staff development 11. Maintain strict confidentiality of all sensitive information and adhere to company policies regarding data protection and privacy. 12. Partners with IT Leadership to ensure compliance with all regulatory requirements and industry standards related to IT and AI, including data privacy, cybersecurity, and ethical AI practices. Other Duties: 1. Assist business groups with improving processes / controls. 2. Provide for and communicate best practices across business groups. 3. Support and assist in development of organization wide tools and methods related to Compliance and Privacy. 4. Provide compliance /privacy/ and other controls training. 5. Coordinate activities with financial auditors as required. 6. Perform other activities as required. update 3-6-25 Joining the Guthrie team allows you to become a part of a tradition of excellence in health care. In all areas and at all levels of Guthrie, you’ll find staff members who have committed themselves to serving the community. The Guthrie Clinic is an Equal Opportunity Employer that welcomes and encourages diversity in the workplace. The Guthrie Clinic is a non-profit, integrated, practicing physician-led organization in the Twin Tiers of New York and Pennsylvania. Our multi-specialty group practice of more than 500 physicians and 302 advanced practice providers offers 47 specialties through a regional office network providing primary and specialty care in 22 communities. Guthrie Medical Education Programs include General Surgery, Internal Medicine, Emergency Medicine, Family Medicine, Anesthesiology and Orthopedic Surgery Residency, as well as Cardiovascular, Gastroenterology and Pulmonary Critical Care Fellowship programs. Guthrie is also a clinical campus for the Geisinger Commonwealth School of Medicine.