Midihealth

Chief Compliance Officer

Remote Full Time

Chief Compliance Officer (CCO) @ Midi Health

📍 Remote (US-Based) 

We’re looking for a mission-driven Chief Compliance Officer (CCO) to lead our regulatory, privacy, and healthcare compliance strategy as we scale a nationwide virtual care model. This role is ideal for a seasoned leader who has built and led compliance programs at high-growth healthcare organizations. You’ll build and evolve a compliance program that enables innovation while upholding the highest standards of patient safety, data privacy, and regulatory integrity.

What You’ll Do

  • Lead the strategy, improvement, and execution of our enterprise compliance program
  • Serve as the executive advisor on regulatory risk, compliance and credentialing operations, privacy operations and audit readiness
  • Oversee compliance with state and federal healthcare laws including HIPAA, HITECH, E/M and prescribing rules, telehealth regulations, Anti-Kickback Statute (AKS), Stark Law, and the False Claims Act
  • Build and maintain a URAC-compliant telehealth compliance and quality program and NCQA credentialing program, including drafting and editing policies, monitoring, reporting and corrective action frameworks
  • Oversee multi-state telehealth compliance, provider licensure rules, credentialing standards, prescribing regulations, and payor compliance policies
  • Direct compliance audits and manage responses to regulatory agencies, payors, and enterprise clients
  • Serve as HIPAA Privacy Officer, including ownership of privacy program, policy framework, workforce training, and PHI incident response
  • Partner with the Chief Information Security Officer on risk assessments and data protection strategy
  • Chair our Quality & Compliance Committee and lead clinical quality and patient safety initiatives in partnership with clinical leadership
  • Build and mentor a high-performing compliance team that scales with business growth

What You Bring

  • 15+ years of experience in healthcare compliance, regulatory affairs, health system operations, or related legal/risk leadership
  • 7+ years in senior leadership, ideally serving as VP or Head of Compliance in a high-growth healthcare environment
  • Experience in telehealth, multi-state provider groups, virtual care platforms, or health plans
  • Deep expertise in U.S. healthcare regulations, including:
    • All telehealth regulations
    • DEA and prescribing regulations
    • URAC/NCQA accreditation standards (Credentialing and Telehealth)
    • HIPAA/HITECH
    • CMS compliance program requirements and payor policies
    • Fraud, Waste & Abuse prevention
    • AKS, Stark, False Claims exposure
  • Proven ability to build and scale corporate compliance programs
  • Executive presence and board communication experience
  • Advanced degree preferred (JD, MBA, MHA, MPH or equivalent)
  • CHC, CHPC, or similar certification a plus

Who You Are

  • A strategic, pragmatic operator who understands how to enable the business while protecting it from risk.
  • A trusted advisor to executives and teams, acting as a strong communicator and influential cross-functional leader.
  • Exceptional interpersonal and operational skills, with a proven ability to manage complex tasks and relationships simultaneously.
  • Possess a strong sense of ownership and accountability for all deliverables, driving programs from conception through completion with a relentless drive for high-quality results. Ability to anticipate obstacles and problem solve. 
  • Strong prioritization and multitasking capabilities and the demonstrated ability to execute complex programs and initiatives in a virtual or remote environment.
  • Highly collaborative, skilled at aligning stakeholders and achieving shared goals through excellent teamwork.
  • Calm under pressure and decisive when facing complex risk environments.
  • Motivated by mission, outcomes, and ultimately improving patient access to care.
  • Build and maintain a URAC-compliant telehealth compliance and quality program and NCQA credentialing program, including drafting and editing policies, monitoring, reporting and corrective action frameworks
  • Oversee multi-state telehealth compliance, provider licensure rules, credentialing standards, prescribing regulations, and payor compliance policies
  • Direct compliance audits and manage responses to regulatory agencies, payors, and enterprise clients
  • Serve as HIPAA Privacy Officer, including ownership of privacy program, policy framework, workforce training, and PHI incident response
  • Partner with the Chief Information Security Officer on risk assessments and data protection strategy
  • Chair our Quality & Compliance Committee and lead clinical quality and patient safety initiatives in partnership with clinical leadership
  • Build and mentor a high-performing compliance team that scales with business growth

The Salary range for this role will depend on experience. Midi pays a competitive base salary, plus equity and benefits. 

#LI-MB1

Please note that all official communication from Midi Health will come from an @joinmidi.com email address. We will never ask for payment of any kind during the application or hiring process. If you receive any suspicious communication claiming to be from Midi Health, please report it immediately by emailing us at careers@joinmidi.com.

Midi Health is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status.

Please find our CCPA Privacy Notice for California Candidates here.