• Lead delivery of FedRAMP readiness/authorization support, CMMC Level 1–3 assessments and gap remediation, HITRUST r2 validated assessment preparation, NIST 800-53/800-171 control implementation and SSP development, and NIST CSF maturity assessments. • Provide pre-sales technical validation on federal/complex opportunities — these deals typically need scoping rigor before contract that standard-framework deals don't. • Build and maintain control-mapping libraries, SSP templates, POA&M templates, and evidence-collection playbooks calibrated to the depth federal frameworks require. • Track framework revisions (NIST 800-53 Rev 6, CMMC rule finalization, FedRAMP 20x, etc.) and translate changes into playbook updates promptly — these frameworks move on regulatory timelines, not product timelines. • Define pricing for federal/complex engagements, reflecting higher complexity and duration than standard-framework work. • Own margin and utilization on your engagement book; forecast capacity against a specialized, harder-to-backfill skillset. • Build AI-assisted control-mapping and evidence-review playbooks, with heavier human-review gates than standard frameworks warrant given ATO/certification consequences. • Define QA guardrails specific to federal work: accuracy is non-negotiable given the downstream consequence (loss of certification/authorization eligibility). • Set clear boundaries/disclaimers on what Sprinto's assessment does and doesn't guarantee toward formal certification/authorization outcomes.

• Own delivery for standard-framework engagements: ISO 27001 (implementation & surveillance), SOC 2 Type I/II readiness, GDPR, PCI DSS compliance programs, gap assessments, control/check mapping, internal audits, policy reviews, audit readiness support. • Run multiple concurrent client engagements to a consistent quality bar without close supervision. • Maintain and evolve templates, control-mapping libraries, workshop agendas, and QA rubrics for standard frameworks; keep them current as frameworks revise (ISO 27001:2022 transition-type updates, SOC 2 trust criteria changes, GDPR enforcement guidance). • Extend the library opportunistically to adjacent frameworks (HIPAA, PCI DSS, ISO 42001) as demand grows. • Define pricing/packaging for standard-framework engagements (fixed-fee tiers, retainer options). • Own utilization, margin, and delivery forecasting for your own engagement book. • Partner with Sales/SE/CS to attach and renew standard-framework services; support deal conversion where technical validation is needed. • Build and maintain AI-assisted playbooks for standard frameworks (gap assessment, control mapping, internal audit checklists). • Define structured input forms/checklists so juniors or AI-assisted workflows produce consistent first-draft output. • Set QA guardrails: mandatory source inputs, validation steps, human approval gates. • Establish acceptance criteria and review checkpoints for deliverables. • Flag scope creep early; escalate ambiguous liability questions rather than absorbing them silently.

• Support the Senior Compliance Director to develop, administer and monitor the implementation of a CMS that ensures the Bank’s compliance with all laws and regulations applicable to its operations and product offerings. • Responsible for developing, implementing, and reporting on the monitoring and testing compliance program across the Core Bank and Fintech Partners, to provide oversight of compliance with federal, state, agency, and regulatory requirements. • Assists in developing and maintaining a comprehensive assessment of compliance risks throughout the Bank’s operations. • Develop and maintaining annual calendar of scheduled compliance testing and monitoring activities, informed by appropriate risk assessments. • Evaluate identified issues, including conducting a root cause analysis, and recommendations to improve policies, procedures, potential efficiencies, and controls. Complete validation for completed issues. • Develop clear and concise reporting of the results of compliance programs and communicate to Board, Management, Business Units and Partners. • Manage a team of Compliance professionals. Responsible for hiring, coaching and development. • Research, analyze, draw conclusions related to all federal and state rules and regulations and their applicability to Core Bank and Fintech Partners products, services, and systems. • Serve as an in-house subject matter expert to provide compliance advice and guidance to relevant Core bank staff and Fintech Partners, while addressing any compliance questions. • Assist with internal/external audit, and regulatory examinations requests. • Follow and comply with all regulatory and compliance regulations. • Provide internal service in accordance with Coastal Core Values. • Because we are a rapidly changing organization, there will be other duties as assigned.

Role Description Lead enterprise compliance for a fast-growing healthcare organization operating at the center of value-based care, population health, Medicare Advantage, Medicaid, risk adjustment, and home-based clinical operations. This is a senior compliance seat for someone who has worked inside a value-based care enabler or closely comparable model, not a broad hospital-only compliance role. The right candidate will understand how compliance actually works when clinical teams, nurse practitioners, payer requirements, risk adjustment documentation, multi-state Medicaid obligations, privacy, quality, audits, and executive governance all intersect. You will help build and run a compliance program that supports growth while protecting patients, providers, payers, and the business. What You Will Do - Lead and strengthen the enterprise compliance program across corporate and clinical compliance. - Maintain policies, standards, procedures, evidence, reporting, and governance aligned with OIG guidance and applicable federal and state healthcare requirements. - Conduct compliance risk assessments and help build annual compliance work plans. - Monitor regulatory changes and translate them into practical operating requirements. - Lead internal compliance investigations, root-cause analysis, corrective action plans, and follow-through. - Partner with Clinical Operations, Legal, HR, Information Security, Revenue Cycle, Quality, Credentialing, and Executive Leadership. - Support compliance with Medicare Advantage, Medicaid, CMS, telehealth, payer, and risk adjustment requirements. - Monitor clinical and provider compliance, including nurse practitioner scope of practice, collaboration agreements, supervision requirements, licensure, credentialing, privileging, and enrollment. - Support HIPAA Privacy and Security initiatives in partnership with Information Security. - Participate in CMS, Medicare Advantage, Medicaid, HIPAA, NCQA, URAC, payer, and related healthcare audits. - Develop compliance education and training for employees, providers, and leaders. - Build executive dashboards, compliance metrics, and Board-ready reporting. - Support M&A, integration, and expansion diligence from a compliance perspective when needed. Qualifications - Direct compliance experience in value-based care, population health, risk adjustment, Medicare Advantage, Medicaid, home-based care, or a comparable healthcare enablement environment. - 7+ years of progressively responsible healthcare compliance experience. - 3+ years in a compliance leadership role. - A progressive, explainable compliance career history with increasing scope, stable tenure, and current or recent work in a relevant healthcare environment. - Experience managing both corporate and clinical compliance programs. - Strong working knowledge of OIG Compliance Program Guidance, CMS requirements, Medicare Advantage, Medicaid, HIPAA, Fraud, Waste & Abuse, Stark Law, Anti-Kickback Statute, telehealth regulations, provider licensure, credentialing, and nurse practitioner scope-of-practice requirements. - Experience leading internal investigations, audits, regulatory inquiries, and corrective action plans. - Ability to translate complex regulatory requirements into practical operating processes. - Strong executive communication, judgment, documentation, and cross-functional leadership. - Comfort operating in a growing, multi-state healthcare organization where compliance needs to be both rigorous and practical. Nice To Have - Experience with organizations similar to value-based care enablement, home assessment, population health, or risk adjustment platforms. - Experience supporting Medicaid compliance across multiple states. - Certified in Healthcare Compliance (CHC), Certified Compliance & Ethics Professional (CCEP), JD, MHA, MPH, MBA, or another relevant advanced credential. - Experience with CMS, NCQA, URAC, Medicaid, Medicare Advantage, HIPAA, payer, or related healthcare audits. - Experience building compliance dashboards, Board reporting, Power BI reporting, or other executive-level metrics. - Experience with M&A diligence, integration, or rapid multi-state expansion. - Experience thinking through appropriate AI usage and safeguards in a regulated healthcare environment. Location This is a remote U.S. role with occasional travel as needed for leadership, audit, clinical, or integration work. Compensation The expected compensation range is $140,000 to $160,000 base salary, plus a bonus tied to successful audits and compliance outcomes. Interview Process Qualified candidates will complete a video interview with Urrly focused on value-based care compliance depth, Medicare Advantage and Medicaid exposure, clinical/provider compliance, investigations, audit readiness, governance, executive communication, and compensation/logistics alignment. Strong candidates may then be introduced to the client team for additional conversations. Apply Apply now and get a response within 24 hours.