Compliance Analyst

Compliance Analyst Location: Remote (U.S.) Want to help build the future of healthcare compliance? Health Gorilla is a national interoperability and health information exchange company dedicated to improving healthcare through secure, standards-based data sharing. As a designated Qualified Health Information Network (QHIN) under TEFCA, Health Gorilla connects healthcare organizations, technology partners, and patients through a trusted network that enables seamless exchange of health information nationwide. The Compliance Analyst supports Health Gorilla’s compliance program by helping ensure adherence to TEFCA, HIPAA, information blocking regulations, data governance requirements, and other federal and state healthcare regulations. The role works closely with Legal, Security, Product, Engineering, Operations, and Data teams to monitor compliance, conduct investigations, support audits, and identify compliance risks across Health Gorilla’s interoperability platforms. If you are a compliance professional who is passionate about healthcare interoperability, data governance, emerging technologies, and regulatory compliance, this role is for you! What you will do at Health Gorilla Compliance Monitoring & Investigations ● Conduct compliance monitoring activities to identify potential risks, anomalies, or policy violations. ● Review system activity, access logs, data exchange activity, and operational workflows for compliance concerns. ● Assist with investigations involving privacy, security, TEFCA, participant compliance, or data-use concerns. ● Document findings, recommend corrective actions, and track remediation efforts. Data Analytics & Compliance Reporting ● Utilize Databricks, SQL, or similar analytical platforms to support compliance reviews, audits, and investigations. ● Develop and execute queries or leverage modern tools to analyze data exchange activity, access patterns, user behavior, and operational metrics. ● Leverage AI where appropriate to prepare reports and dashboards that support compliance monitoring and risk management activities. ● Partner with Engineering and Data teams to improve automated compliance monitoring capabilities and optimize the use of AI tools. Regulatory Compliance & TEFCA Oversight ● Support ongoing compliance with TEFCA, the Common Agreement, and QHIN operational requirements. ● Monitor changes in healthcare regulations, interoperability requirements, and industry guidance. ● Assist with regulatory audits, assessments, and external reviews. ● Participate in compliance reviews for new products, services, partnerships, and business initiatives. Policy Development & Training ● Assist in developing and maintaining compliance policies, procedures, and standards. ● Support compliance training and awareness programs for employees and business partners. ● Help maintain compliance documentation and evidence repositories. Cross-Functional Collaboration ● Work closely with Legal, Security, Privacy, Product, Engineering, and Operations teams. ● Provide practical compliance guidance to business stakeholders. ● Foster a culture of integrity, accountability, and regulatory excellence. What you bring to the role ● Bachelor’s degree in Healthcare Administration, Health Informatics, Public Health, Business, Information Systems, Law, or related field. ● Minimum 5 years of experience in healthcare compliance, healthcare operations, health information exchange, health IT, healthcare privacy, or related regulatory functions. ● Working knowledge of HIPAA and other privacy laws, TEFCA and interoperability frameworks, 21st Century Cures Act and Information Blocking requirements, and healthcare privacy and security principles. ● Experience performing compliance monitoring, audits, investigations, or risk assessments. ● Strong analytical, organizational, process-driven, and documentation skills. ● Excellent written, presentation, and verbal communication skills. ● Experience reviewing healthcare technical specifications. ● Experience leveraging AI-powered tools to enhance compliance workflows. Preferred qualifications ● Experience working for a QHIN, HIE, healthcare technology company, EHR vendor, payer, or healthcare data network. ● Experience writing and executing SQL queries. ● Experience using Databricks, Snowflake, Azure Data Explorer, or similar data analytics platforms. ● Experience supporting compliance programs involving healthcare interoperability and data exchange. ● Familiarity with healthcare standards including HL7, FHIR, CDA, and IHE frameworks. ● Professional certifications such as Certified in Healthcare Compliance (CHC), Certified in Healthcare Privacy Compliance (CHPC), Certified Information Privacy Professional (CIPP/US), or Certified Information Systems Auditor (CISA). ● Experience working with regulatory audits and external assessors. What You Will Love About Us! ● Health Gorilla takes a market-based approach to pay, and the base salary range for this role is $95,000 to $120,000, based on experience and geography. Please note that ranges may be modified at any time, and there is no guarantee offers will be at the top of a posted range. ● New hire stock option grant ● 401(k) plan with discretionary matching (historically matched at 3%) ● Unlimited PTO plus 12 Holidays ● Medical, dental, and vision insurance for you and your family ● Short-, long-term disability, and life insurance ● Optional: Pet Insurance, Legal Services, and Credit Monitoring ● Mental health and wellness support ● Paid parental leave (up to 12 weeks) ● Monthly stipend for phone and internet ● Use of an Apple Laptop plus a $400 stipend for additional equipment