Job Summary As our Compliance Specialist, you will be the organizational authority on regulatory, grant, programmatic, and legal compliance across all of Hearts & Lives' programs and operations. This role spans multiple compliance domains — OMB Uniform Guidance (2 CFR Part 200) for federal grants, HIPAA and California privacy law (CMIA), California mandated reporting (CANRA), DHCS, nonprofit regulatory filings, California employment law, internal audits, and staff training. You will develop and maintain compliance systems, conduct quarterly internal program audits, write and update policies, coordinate corrective action plans, and ensure Hearts & Lives is compliance audit-ready every single day not just during audit season. You will hold the organization accountable while helping every team member do their most compliant, confident work. Responsibilities Grant & Contract Compliance

• Maintain a compliance tracking matrix for all active federal, state, county, and private grants
• Conduct quarterly internal contracts compliance reviews; communicate with management, written findings and corrective action plans
• Ensure all programs operate within approved scope and funder terms and conditions
• Ensure compliance with OMB Uniform Guidance (2 CFR Part 200): allowable costs, procurement, documentation, subrecipient monitoring. Privacy & HIPAA
• Serve as the organization's HIPAA Privacy Officer (or support the designated officer)
• Maintain and update HIPAA privacy policies; conduct annual staff HIPAA training
• Ensure compliance with

CMIA, 42 CFR

Part 2 (as applicable), and all Business Associate Agreement requirements Mandated Reporting

• Ensure all staff understand and fulfill CANRA (child abuse) and elder/dependent adult abuse mandated reporting obligations
• Deliver mandated reporter training at hire and annually; maintain a confidential mandated report log Program Documentation & Internal Audits
• Conduct quarterly internal case file audits across all programs; produce written audit findings reports
• Assist on developing and track corrective action plans with specific steps, timelines, and responsible parties
• Ensure client-facing forms, consent documents, and releases are current and legally compliant California Nonprofit Regulatory Compliance
• Manage annual filings: IRS Form 990, California RRF-1, Secretary of State Statement of Information
• Monitor California nonprofit law and regulatory changes; brief the Executive Director on material updates Employment Law Compliance
• Ensure organizational compliance with

FEHA, CFRA, SB 1343

harassment training, Cal/OSHA, and AB 5

• Coordinate required employment law training; maintain training records for all staff Policy Development & Staff Training
• Develop, maintain, and annually review all organizational compliance policies and procedures
• Design and deliver an annual compliance training calendar covering all required topics
• Foster a compliance culture that is supportive, practical, and mission-aligned Experience
• Bachelor's degree in Public Administration, Public Health, Health Administration, Business, Social Work, or a related field or an equivalent combination of education and 2+ years of directly relevant experience
• 2+ years of compliance, contracts management, program administration, or regulatory affairs experience in a nonprofit, government, or healthcare setting
• Working knowledge of the HIPAA Privacy Rule and California CMIA
• Familiarity with California mandated reporting law (CANRA) and elder/dependent adult abuse reporting
• Experience conducting internal compliance audits and writing findings reports and corrective action plans
• Strong written communication: ability to write clear policies, audit reports, and training materials
• Valid California driver's license and reliable personal transportation

Pay:

$26.00 - $30.00 per hour

Benefits:

Dental insurance Flexible schedule Health insurance Paid time off

Work Location:

In person