Compliance and Privacy Officer

SGA Dental Partners is hiring a Compliance & Privacy Officer to join our team soon in Richmond Hill, GA! The Compliance & Privacy Officer leads the compliance and privacy function for SGA Dental Partners and is responsible for the design, implementation, and ongoing oversight of a system-wide Compliance and Privacy Program across a multi-state dental services organization. This role ensures organizational practices align with applicable federal and state laws, regulatory requirements, and internal standards. The Compliance & Privacy Officer serves as an independent and objective resource, promoting a culture of ethical conduct and accountability while exercising a high degree of autonomy and judgment in evaluating compliance and privacy matters. This position partners across the organization to ensure effective program integration, execution, and continuous improvement. The Compliance & Privacy Officer reports directly to the Chief Executive Officer, with reporting responsibility to the Board of Directors' Audit Committee, ensuring appropriate independence, governance, and oversight of the Compliance and Privacy Program. Key Responsibilities : Compliance and Privacy Program Leadership Design, implement, and oversee a comprehensive, system-wide Compliance and Privacy Program aligned with Office of Inspector General (OIG) guidance, regulatory requirements, and industry best practices. Promote and reinforce a culture of ethical conduct, accountability, and regulatory compliance across the organization. Oversee the organization's HIPAA Privacy Program, including coordination with Information Security and Legal regarding data protection, breach response, and regulatory compliance. Serve as the organization's primary resource on compliance and privacy matters while maintaining independence and objectivity. Provide regular reporting to executive leadership and the Board of Directors' Audit Committee regarding the effectiveness of the Compliance and Privacy Program, significant compliance and privacy risks, investigation outcomes, corrective action activities, and overall program performance. Advise executive leadership and the Board of Directors' Audit Committee on emerging regulatory risks, compliance trends, and strategic initiatives to strengthen the organization's compliance and privacy framework. Risk Assessment and Program Oversight Conduct enterprise-wide compliance risk assessments incorporating audit findings, hotline activity, regulatory guidance, and enforcement trends. Develop, implement, and oversee the annual Compliance and Privacy Work Plan based on identified organizational risks and regulatory priorities. Evaluate program effectiveness and recommend enhancements to strengthen the organization's compliance framework. Monitor emerging regulatory requirements and industry developments affecting the organization. Policies, Procedures, and Internal Controls Develop, implement, and maintain compliance and privacy policies, procedures, and internal controls designed to prevent, detect, and address non-compliant conduct. Oversee processes related to the review, execution, and monitoring of Business Associate Agreements. Ensure compliance controls are effectively integrated into operational processes across the organization. Partner with Legal, Human Resources, Operations, and Information Security to support enterprise-wide compliance initiatives. Whistleblower and Reporting Program Oversight Lead the organization's whistleblower and reporting program, including the design, implementation, and ongoing monitoring of reporting processes. Maintain anonymous reporting channels, including the compliance hotline and other intake mechanisms, to support timely reporting of compliance, privacy, financial, operational, or governance concerns. Establish and reinforce non-retaliation standards and reporting protocols for employees, affiliated practices, management, and other stakeholders. Oversee the triage of reported concerns and coordinate investigations with Legal, Human Resources, Operations, Information Security, and other business functions, as appropriate. Escalate significant compliance, privacy, financial, operational, or governance matters to executive leadership and the Board of Directors' Audit Committee, as appropriate. Track corrective action plans, validate remediation efforts, and provide trend analysis and reporting regarding hotline activity, investigations, and organizational risk. Investigations and Regulatory Response Lead investigations involving potential compliance or privacy violations, including matters reported through the compliance hotline or other reporting mechanisms. Ensure consistent investigation protocols, documentation, corrective actions, and regulatory reporting, as required. Oversee exclusion screening processes and related compliance controls. Coordinate responses to government inquiries, audits, investigations, subpoenas, and regulatory agencies in partnership with Legal. Training, Education, and Monitoring Develop and oversee compliance and privacy training and education programs for employees, management, and leadership. Lead auditing and monitoring activities to evaluate program effectiveness and identify areas of regulatory or operational risk. Serve as an internal resource regarding compliance, privacy, and healthcare regulatory requirements. Promote organizational awareness of ethical standards, regulatory obligations, and compliance responsibilities. Regulatory Oversight and DSO-Specific Compliance Monitor regulatory requirements applicable to dental service organizations, including state dental board regulations, healthcare privacy laws, advertising regulations, and operational compliance requirements across supported practices. Provide practical guidance regarding evolving regulatory requirements impacting multi-state dental operations. Partner with executive leadershi