Compliance and Privacy Specialist

Summary Statement:

Reporting to Corporate Compliance & Privacy Officer, the Compliance and Privacy Specialist manages the ongoing compliance program implementation and execution, which includes but is not limited to compliance and privacy policies, managing Council meetings, development and participation in training and education, audits and monitors, tracking action items for findings through completion and assists with other compliance program activities. The Compliance and Privacy Specialist contributes to the success of the Enterprise Compliance Program by modeling and promoting compliance with our Code of Conduct, promoting ethical behavior, facilitating proper decision-making, and providing staff with the tools and resources to do what is right in any context.

Position Accountabilities:

• Supports compliance training and communication activities:
  • Assists in developing and delivering compliance training programs, including HIPAA, privacy, security, and new-hire orientation modules.
  • Prepares and distributes compliance and privacy communications, including newsletters, intranet updates, website content, and awareness materials.
  • Collaborates with Communications, Marketing, Council members, and business partners to strengthen compliance awareness.
• Coordinates compliance program administration:

• • Supports scheduling and logistics for Compliance Council meetings; prepares agendas, materials, and meeting records.

• • Assists with the annual compliance work plan and tracks milestones, findings, corrective actions, and completion status.

• • Maintains compliance databases, scorecards, documentation tools, training records, and supporting reports.

• Supports monitoring, auditing, and issue resolution:

• • Performs routine compliance monitoring and assists with internal and third-party audits under the guidance of the Corporate Compliance & Privacy Officer.

• • Collects documentation, coordinates interviews, researches compliance matters, and helps prepare responses to findings.

• • Supports the compliance line, hotline coverage, and compliance reviews as assigned.

• Maintains compliance policies and records:

• • Assists with policy and procedure reviews, updates, drafting, and version control.

• • Maintains SharePoint portal content and compliance document libraries.

• • Updates the annual compliance playbook and maintains GDPR and HIPAA audit-ready documentation.

• Supports privacy program activities:

• • Assists with data mapping, privacy impact analyses, privacy education, and awareness messaging.

• • Helps identify privacy issues, document corrective actions, and maintain privacy-related records.

• • Works with the Corporate Compliance & Privacy Officer and Enterprise Director, Information Security, to support data protection efforts.

• Participates in the annual compliance risk-prioritization process and supports identified mitigation activities.

• Maintains current knowledge of compliance and privacy requirements through training, relevant literature, and committee participation.

• Recommends quality and process improvements that strengthen the efficiency and effectiveness of the compliance program.

Position Requirements: Knowledge, Skills, Abilities (Note: minimum requirements)

• Bachelor’s degree in records management, project management, business, healthcare, or a related field required; master’s degree preferred.

• Three to five years of experience supporting healthcare compliance, privacy, audit, risk, or related business operations. Experience coordinating compliance-related projects preferred.

• Compliance or privacy certification preferred.

• Excellent written, verbal, analytical, problem-solving, organizational, and project-coordination skills.

• Proficiency with Microsoft Office applications, spreadsheets, databases, SharePoint, and document-management tools.

• High level of integrity, discretion, accuracy, and confidentiality.

Position Competencies:

Communication - Clear written and verbal communication; training and presentation support.

Contributing to Team Success - Cross-functional collaboration with Legal, Information Security, Human Resources, and business partners.

Decision Making - Sound judgment, confidentiality, issue escalation, and evidence-based recommendations.

Initiating Action - Proactive follow-through on compliance tasks, corrective actions, and program commitments.

Managing Work (incl. Time Management) - Project coordination, prioritization, recordkeeping, deadline management, and attention to detail.

Quality Orientation - Accurate documentation, monitoring, version control, and continuous process improvement.

Work Standards - Integrity, discretion, accountability, consistency, and adherence to established requirements.

Technical/Professional Knowledge/Skills - Healthcare compliance and privacy practices; HIPAA; auditing and monitoring; policy administration; SharePoint and Microsoft Office.

This is a hybrid position requiring a minimum of two days per week in our Oakbrook Terrace corporate office.

Joint Commission offers a comprehensive benefits package. For an overview of our benefits package, please visit our Joint Commission Career Page

This job description is intended to describe the general nature and level of work performed by an employee assigned to this position. The description is not an exhaustive list of all duties, responsibilities, knowledge, skills and abilities, and working conditions associated with this position. All requirements are subject to possible modification due to business needs and/or reasonable accommodations for individuals with disabilities.

MIN

MAX

We are an Equal Opportunity Employer. All qualified applicants will receive consideration without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other status protected by law.

About Us

About Us

Discover our values, initiatives, partners and more.

Why Choose Us

We provide tools for ongoing performance improvement initiatives

Key Initiatives

Discover our priorities and how we advance health care.

Our Team

Experts collaborate globally to enhance safety practices.