Senior Director Compliance and Privacy

About Stellar Health: Historically, US Healthcare has relied on a fee-for-service reimbursement system where providers are paid based on the quantity of patient visits and procedures, rather than the quality of health outcomes. At Stellar Health, we help primary care providers put patient health first. Our platform - a mix of technology, people, and analytics - supports providers at the point of care, delivering real-time patient information, activating practice staff, and empowering providers and care teams with incentives that reward the work they are already doing to keep patients healthy. Using the Stellar App, our web-based, point-of-care tool; practices receive a simple checklist of recommended actions that support the best quality care. Providers and care teams are then paid monthly for each action they complete, and Payors save money in reduced healthcare costs along the way. Stellar is a US-based Health-tech backed by Top VCs (General Atlantic, Point72, & Primary Venture Partners) with an established product & proven operating model. We’ve shown that we make a real difference for physician practices and their patients. About the position: Reporting to the Chief Compliance Officer, the Senior Director of Compliance and Privacy is responsible for the end-to-end management of the compliance and privacy program across all Stellar Health entities, including our SaaS business and our two ACOs. This is a senior leadership role with direct oversight of the compliance function's daily operations, regulatory strategy, and external-facing interactions with health plan compliance teams, outside counsel, and government regulators. The Senior Director serves as the CCO's operational counterpart and backup, with sufficient authority and judgment to run the compliance program independently. This person will manage a compliance and privacy analyst, chair internal compliance governance bodies, and own the pre-contract compliance review process that supports Stellar's new business pipeline. This role is critical given the current federal enforcement environment around risk adjustment, managed care, and Medicare Advantage, and requires someone who can operate with minimal oversight across multiple entities with distinct payor relationships and regulatory obligations. How you'll make an impact: - Implement, maintain, and monitor all requirements established in the Stellar Health compliance plan, applicable laws and regulations, and customer contracts across all four entities - Lead pre-contract compliance reviews for new payor and provider agreements, enabling Stellar's revenue growth without creating regulatory or process bottlenecks - Own the compliance response process for payor compliance audits, HIPAA OCR inquiries, state AG investigations, and any DOJ/OIG enforcement activity, including early-stage triage, document production, and government interface - Execute the annual CRISP risk assessment process and develop annual work plans and program evaluations, calibrating the depth of compliance controls to the actual risk profile rather than overengineering processes that create unnecessary friction - Maintain an inventory of all applicable regulations and contractual compliance obligations across AKS, Stark Law, HIPAA, CMPL, and CMS program requirements, in partnership with other CRISP team members - Establish and monitor effective communication channels that promote a speak-up culture, including disseminating information and training, and receiving and responding to questions and concerns through anonymous reporting channels - Oversee thorough investigations and mitigation activities, including practices to prevent and detect retaliation - Manage compliance and privacy documentation including policies, procedures, plans, and standards across all four entities, ensuring consistency where appropriate and entity-specific customization where required - Build and maintain compliance monitoring strategies to detect anomalous user activity in the Stellar platform, including dashboards and reporting - Chair the Customer Compliance Council and the Compliance and Privacy Committee, and support the CCO with the Compliance, Security, and Risk Committee - Manage relationships with external stakeholders including outside counsel, customer compliance representatives, and regulatory bodies - Coordinate responses to serious compliance or privacy incidents including triage, mitigation, root cause analysis, and communication with all impacted parties - Oversee business courtesies and conflicts of interest processes - Support compliance and privacy aspects of customer and sales-related matters including pre- and post-contracting questionnaires What you'll bring: - 10+ years of experience in healthcare compliance and privacy, with progressive responsibility - At least 3 years of people management experience - Direct, hands-on experience with Anti-Kickback Statute safe harbor analysis, Stark Law, and HIPAA - Experience managing compliance across multiple legal entities or business lines simultaneously - Direct experience working with or for Medicare Advantage health plans, ACOs, or value-based care organizations - Experience responding to government inquiries or investigations (DOJ, OIG, state AG, or OCR) - Experience with payor or health plan compliance audit processes, either conducting them or responding to them as a vendor or delegated entity - Familiarity with risk adjustment programs, HCC coding compliance, and the current CMS enforcement environment - Experience conducting or supporting pre-contract compliance reviews for health plan or provider agreements - Proven ability to calibrate compliance controls to actual risk, avoiding overengineered processes while maintaining regulatory defensibility - Ability to represent the organization independently in interactions with health plan compliance officers, outside counsel, and government regulators - Excellent interpersonal, communication, and presentation skills that adjust to the audience - Bachelor's degree or equivalent demonstrated work experience in business, healthcare, or a related field