[Hiring] Director, Compliance @Sharecare

Role Description

This position supports the Chief Privacy Officer in setting privacy strategy and enterprise risk posture, including monitoring emerging state and federal regulations that directly affect the organization. The Director, HIPAA Compliance owns operational execution of privacy and Release of Information (ROI) compliance across assigned portfolios, regions, or client segments, and serves as an external-facing leader with clients, auditors, and regulators. This role interprets HIPAA, state medical record laws, and client contracts and operationalizes requirements into Sharecare ROI policies, SOPs, training materials, and quality controls. The Director ensures compliance considerations are embedded into implementations, product adoption, renewals, and expansions while balancing regulatory risk, client experience, and operational scalability.

Qualifications

• Bachelor’s degree required; Master’s degree preferred; or equivalent experience.
• Typically requires 8–10+ years of ROI operations, privacy, compliance, and/or client success experience, including leadership responsibility.
• Privacy credentials such as RHIA, CHPS, CHPC or equivalent preferred.
• Must have experience with or expertise in the following:
  • HIPAA / HITECH / Omnibus Final Rule.
  • Office for Civil Rights guidance and processes; regulatory inquiry and audit response.
  • Federal ROI requirements and state medical record/privacy laws and fee rules, including multi-state operational implications.
  • Operationalizing privacy requirements into policies, SOPs, training, and quality controls at scale.
  • Leading internal/client audits, root-cause analysis, corrective action planning, and sustainable remediation.
  • Incident investigation, documentation, and cross-functional breach/incident response partnership with Security and Legal.
  • Cross-functional leadership with Product, Operations, Legal, Security, Sales, and Client Success; ability to embed compliance into implementations, product adoption, renewals, and expansions.
  • Strong executive presence and client-facing capability, including participation in escalated discussions with clients and (as needed) regulators.
  • Excellent written and verbal communication skills.
  • Ability to prepare, submit, and conduct presentations for employees and/or clients.
  • Well-versed in current EHR technology usage with hands-on experience with systems such as Epic, Allscripts, Cerner, NextGen or similar (preferred).
  • Proven ability to write comprehensive policy and procedure documents.
  • Capacity to interact successfully with all levels of the organization.
  • Excellent Microsoft Office skills.

Requirements

• Maintain privacy of all patient, employee and volunteer information and access such information only on a need-to-know basis for business purposes.
• Comply with all regulations regarding corporate integrity and security obligations.
• Report unethical, fraudulent, or unlawful behavior or activity.
• Maintain current and yearly HIPAA certification.

Company Description

Sharecare is a digital healthcare company that delivers software and tech-enabled services to stakeholders across the healthcare ecosystem to help improve care quality, drive better outcomes, and lower costs. Through its data-driven AI insights, evidence-based resources, and comprehensive platform – including benefits navigation, care management, home care resources, health information management, and more – Sharecare helps people easily and efficiently manage their healthcare and improve their well-being. Across its three business channels, Sharecare enables health plan sponsors, health systems and physician practices, and leading pharmaceutical brands to drive personalized and value-based care at scale.