Risk & Compliance Officer – HIPAA & Data Management

Position Summary

We are looking for a Risk & Compliance Officer to oversee HIPAA compliance, patient data privacy, secure data transfer, data management, risk monitoring, and staff training. The role will ensure that PHI and confidential information are handled securely, compliance risks are identified and corrected, and employees are properly trained on privacy and data-security requirements.

Key Responsibilities

- Monitor compliance with HIPAA Privacy, Security, and Breach Notification requirements.
- Ensure PHI/ePHI is accessed, stored, shared, and transferred only through approved and secure methods.
- Review email, cloud storage, shared drives, downloads, uploads, and other data-handling processes for compliance risks.
- Conduct periodic compliance audits and risk assessments.
- Investigate suspected privacy, security, or unauthorized data-access incidents. Maintain compliance policies, audit records, incident documentation, and corrective-action tracking.
- Review user access and support appropriate role-based access controls. Train employees on HIPAA, PHI handling, secure data transfer, password security, remote-work security, and incident reporting.




- Conduct onboarding and periodic refresher compliance training.
- Coordinate with Operations, HR, IT, management, and external compliance advisors when required.

Qualifications

Experience in healthcare compliance, HIPAA, risk management, information security, or healthcare operations. Good understanding of HIPAA, PHI/ePHI, Minimum Necessary standards, secure data sharing, and access controls. Strong auditing, documentation, investigation, and training skills. High level of confidentiality, attention to detail, and skilled judgment.

Pay: ₹500,000.00 - ₹1,000,000.00 per year

Benefits:

- Health insurance
- Leave encashment
- Paid sick time
- Provident Fund
- Work from home

Application Question(s):

- How many years of experience do you have in HIPAA compliance, healthcare compliance, risk management, or information security?
- Do you have experience handling PHI/ePHI and healthcare data privacy requirements?
- Have you conducted compliance audits, risk assessments, or investigated data/privacy incidents?
- o you have experience conducting HIPAA and data-security training for employees?
- What is your current/ previous CTC ?
- What is your expected CTC ?

Work Location: Remote

📌 Risk & Compliance Officer – HIPAA & Data Management (India)
🏢 Sunshine Pediatric and Family Clinic
📍 India