• Design & Implement: Create robust broker-dealer and investment advisory written procedures and SOPs that align with evolving regulatory requirements. • Review & Refine: Audit public communications and marketing materials to ensure they are consistent with regulatory guidelines and internal policies. • Voice of the Customer: Review customer communications to detect, identify, and document customer complaints, ensuring every concern is addressed with integrity. • Educate: Lead regulatory compliance training for registered associates to promote awareness and adherence to best practices. • Strategic Advisory: Act as a subject matter expert for management and key stakeholders on all compliance-related matters. • Regulatory Liaison: Coordinate and assist with regulatory inquiries and examinations from governing bodies. • Risk Mitigation: Lead comprehensive risk assessments to investigate, identify, and address potential compliance issues, recommending actionable solutions. • Collaborate: Partner with other compliance officers on various team projects and strategic initiatives. • Stay Ahead: Maintain current, expert-level knowledge of regulatory changes to keep Acorns ahead of the curve.

• Lead a global team of trade compliance professionals, building capability across diverse products, value streams, and geographies while collaborating across a matrix of trade operations partners throughout the network • Build and strengthen a best‑in‑class global trade compliance function by enhancing organizational capabilities, optimizing team structure, and developing sustainable expertise across the network • Work collaboratively with Danaher and Diagnostics platform trade compliance leadership to align priorities, policies, and strategic initiatives across the global organization. • Own and execute the global trade compliance strategy, ensuring alignment with regulatory requirements, operational priorities, and Beckman Coulter Diagnostics’ mission to relentlessly reimagine healthcare through innovation and continuous improvement. • Serve as the primary liaison with customs authorities and regulatory agencies, integrating trade compliance risks into enterprise risk management and communicating exposure, mitigation plans, and business impact to leadership. • Drive comprehensive trade compliance audit and monitoring programs to identify gaps, strengthen internal controls, and implement process improvements. • Champion the global trade compliance digitization roadmap by enhancing existing automation, identifying opportunities to integrate advanced and AI‑enabled technologies, and leading their adoption across classification, licensing, valuation, and auditing workflows—while influencing stakeholders and securing leadership buy‑in to modernize and scale compliance operations.

***To be considered for the role, you must permanently reside in one of the following states: Alabama, Arkansas, Florida, Georgia, Kentucky, Kansas, Maryland, Michigan, Mississippi, Missouri, North Carolina, Ohio, South Carolina, Tennessee, Texas, Virginia, or West Virginia*** The Senior Compliance Auditor reviews complex audits, performs quality assurance reviews, acts as a peer mentor, and assists management with onboarding process of new auditors. The Senior Compliance Auditor supports the audit supervisor with the development and maintenance of the quarterly audit work plan and audit workflow processes. The Senior Compliance Auditor recommends changes to improve business operations by using professional judgement and knowledge of best practices. This position contributes to special projects, as applicable. The Senior Compliance Auditor performs documentation/chart audits on inpatient and outpatient records, and to provide analysis of the records (provider and facility) reviewed, education and other assistance, as needed. The Senior Compliance Auditor audits VCUHS coding and billing (DRG, CPT, HCPCS, ICD-10) based on a review of medical record documentation and/or billing claim data. Essential Job Statements Audit Claims & Compliance Requirements: Performs audits of a complex nature as assigned by Compliance Audit Manager and/or Supervisor. Assists the Audit Manager with development of the audit schedule by performing ongoing audit software maintenance. Supports the Audit Manager with audit team quality assurance reviews. Serves as team liaison for maintenance and troubleshooting of audit software. Acts as a peer mentor to the compliance audit team and operates with minimal supervision. Conducts audits of hospital and/or physician claims to ensure compliance with all applicable federal, state, local and payor specific requirements. Completes two risk-based audits per month. Increases: Serves as the primary backup to the Compliance Educator, leading compliance education sessions for internal coders Acts as the main backup to the Compliance and Audit Manager, assisting with internal training, presenting audit findings, and leading educational sessions when required. Facilitates and improves clinicians’, administrators' and other appropriate individuals' understanding of payor and regulatory requirements by providing feedback related to documentation and billing information. Works with the Compliance Educator to provide educational topics, including identifying risk-areas and changes in documentation/coding requirements; reviewing materials for Compliance Department’s approval; and teaching of general compliance education sessions as necessary Corrective Action for Non-Compliant Issues Identified in Proactive Auditing: Coordinates Corrective Action Plan monitoring schedule and communicates progression to management. Assists management of departments with identified non-compliant issues in developing Corrective Action Plans to correct potential weakness and assure ongoing compliance. Conducts follow up reviews to ensure the Corrective Action Plans have been adequately implemented by management. External Audits Assists Audit Manager in collaboration with MCVP and MCVH business offices to identify and track trends of external audits. Actively assists Compliance Audit Supervisor in the development of the quarterly audit workplan by identifying risks through analysis of external audit and healthcare compliance activities Education Sustains a working knowledge of relevant compliance issues, laws and regulations through periodicals, seminars, training programs, and peer contact Research/Special Projects Contributes to the development and ongoing maintenance of the internal Audit Process Manual. Performs as a team lead with onboarding of new auditors. Completes research and/or special projects as requested by management. Prioritizes management requests based on urgency and/or risk established by Compliance Services, VCUHS Administration or the requesting agency. Gathers information from the correct source(s) and summarizes and prepares findings in an appropriate medium Miscellaneous Responsibilities Performs other duties as assigned and/or participates in special projects to support the mission of VCUHS and the Department. Aids team members. Accepts alternate assignments, as required, graciously Patient Population Not applicable to this position. Employment Qualifications Education Required: Bachelor’s Degree in Business, Finance, Allied Health or other health related field from an accredited program Combination of education and experience may be considered in lieu of a degree. Education Preferred: Licensure Required: N/A Licensure Preferred: Certification Required: Licensure, Certification, or Registration Requirements for Hire: One (1) of the following current AAPC certifications: - Certified Professional Coder (CPC) - Certified Professional Coder–Hospital (CPC–H) Certified Professional Coder–Payer (CPC-P) - CPMA Certified Professional Medical Auditor (CPMA) OR One (1) of the following current AHIMA current certifications: - Certified Coding Associate (CCA) - Certified Coding Specialist (CCS) - Certified Coding Specialist–Physician Based (CCS-P) OR - Other current coding related certification Certification Preferred: Minimum Qualifications Years and Type of Required Experience: Minimum of five (5) years of progressively responsible experience in a healthcare environment to include, but not limited to, the following: Working with electronic health records to analyze and interpret clinical documentation for compliance purposes. Extensive data mining and analytic skills combined with experience using AI and advanced platforms focused on driving innovation and enhancing work efficiency. Conducting audits and investigations of medical records to ensure compliance, with an emphasis on risk analysis and quality assessment thorough workflow evaluation and process improvement. Comprehensive knowledge of CMS, OIG, and other regulatory guidelines to support compliant billing practices, with proven ability to interpret and analyze complex regulatory information effectively. Other Knowledge, Skills and Abilities Required: Understanding and identifying diagnostic and procedural codes for clinical services rendered Previous experience with personal computers and software applications to include Microsoft Word, Excel, PowerPoint, and data collection tools. Strong excel proficiency is a must. Other Knowledge, Skills and Abilities Preferred: Seven (7) years of progressive risk auditing, coding and/or coding review experience in CPT, ICD-10; HCPCS coding and strong data mining and analysis skills. Five (5) years previous hospital/physician related work experience in training individuals or groups Working Conditions Periods of high stress and fluctuating workloads may occur. General office environment. Required to car travel to off-site locations, occasionally in adverse weather conditions. May have periods of constant interruptions. Prolonged periods of working alone. Physical Requirements Physical Demands: Work Position: Sitting Additional Physical Requirements/ Hazards Physical Requirements: Hazards: Depth perception, Use of Latex Gloves, Exposure to toxic/caustic/chemicals/detergents, Exposure to moving mechanical parts, Exposure to dust/fumes, Exposure to potential electrical shock, Exposure to high pitched noises, Gaseous risk exposure Mental/Sensory – Emotional   Mental / Sensory: Strong Recall, Reasoning, Problem Solving, Hearing, Speak Clearly, Write Legibly, Reading, Logical Thinking Emotional: Steady Pace, Able to Handle Multiple Priorities, Frequent and Intense Customer Interactions, Able to Adapt to Frequent Change EEO Employer/Disabled/Protected Veteran/41 CFR 60-1.4.

Hotman Group is seeking a CMMC / NIST Consultant / Analyst to support client projects involving CMMC, SSP development, NIST SP 800-171, NIST SP 800-53, FedRAMP, evidence collection, control documentation, and remediation tracking. This is a contract role that may be structured as part-time or full-time based on project needs and candidate availability. We are looking for a mid-level practitioner who can contribute to active client delivery work, produce strong documentation, and help move projects forward in a remote consulting environment. What You’ll Do - Support client engagements related to CMMC readiness, implementation, and documentation - Develop, update, and maintain System Security Plans (SSPs) - Assist with NIST SP 800-171, NIST SP 800-53, and FedRAMP documentation, control mapping, and related deliverables - Gather, organize, and review evidence supporting control implementation - Draft and refine control narratives, policies, procedures, and related compliance documentation - Identify gaps and support development of POA&Ms and remediation tracking - Work with client stakeholders to collect information, validate details, and keep deliverables moving - Contribute to readiness efforts tied to assessments, documentation, and ongoing compliance activities What we're looking for - 3-5 years of relevant experience in GRC, cybersecurity compliance, or related consulting work - Hands-on experience with CMMC-related work (Required) - Experience working with SSPs, policies, procedures, evidence collection, and remediation documentation (Required) - Familiarity with NIST SP 800-171, NIST SP 800-53, and FedRAMP - Strong writing and documentation skills - Ability to work independently in a remote environment - Strong organization, follow-through, and professionalism in client-facing work - Comfort stepping into active projects and supporting delivery work with minimal hand-holding Nice to Have - Experience supporting CMMC Level 2 efforts - Experience with CUI scoping, enclaves, or boundary discussions - Familiarity with POA&Ms, assessment readiness, and control crosswalks - Certifications such as CCP, CCA, CISSP, CISM, or CISA Requirements - Authorized to work in the U.S. - Able to pass a background check - Reliable high-speed internet and a secure remote work setup About Hotman Group Hotman Group is a remote boutique cybersecurity and GRC firm supporting clients across a range of industries and compliance needs. We value strong writing, quality work, collaboration, sound judgment, and practical execution. This role is a strong fit for someone who wants to contribute to meaningful CMMC project work in a contract capacity, whether that means part-time project support or full-time contract availability.