THOMAS

GIMLER

ad1rt6@r.postjobfree.com

631-***-****

East Northport, NY 11731

SKILLS

Culture Transformation

Team Building and Motivation

Core Values Management

Practice Operations Management

EDUCATION

Pace University

Pleasantville, NY

Marketing

Suffolk /Stony Brook University

Stony Brook, NY

AAS in Health Information Technology

CERTIFICATIONS

Health Information Technician (RHIT)

Lean Six Sigma Green Belt

Certified Information Privacy Professional

Registered Health Information Administrator (RHIA)

PROFESSIONAL SUMMARY

SENIOR COMPLIANCE EXECUTIVE Chief Compliance Officer Information Security Executive Vice President of Compliance Exceptional record of achievement in the management of corporate compliance operations, with a special emphasis in Health Information Technology, Information Security, and Environmental Health Safety. Consistent history of reducing organizational risk, liability, and exposure, lowering costs, and maximizing compliance. Experienced in startup and turnaround environments. Excel at conducting assessments, evaluating and updating compliance programs, and developing policies and procedures. Highly adept at creating risk management frameworks, monitoring compliance performance, and managing audits, 501C (3) governance, BPCIA compliance, Enterprise Risk Management, (ERM), GDPR compliance. Multiple industry certifications. Key strengths include: Regulatory Compliance – OMIG – HIPAA – NYSDOH – Project Management – Strategic Planning – HIT Systems HITECH – NIST – Key Performance Indicators (KPIs) – Reporting – Assessments – Corrective Action Plans (CAPs) Root Cause Analysis – Consulting – Sarbanes-Oxley (SOX) – Six Sigma – Contract Negotiations – Budget Control

WEBSITES, PORTFOLIOS, PROFILES

www.linkedin.com/in/thomas-gimler-400a7b25

WORK HISTORY

Compliance Consultant

01/2022

Advising clients on all matters related to Regulatory Compliance, Auditing, Corrective Action, Mitigation, advisory boards, Board of Directors, Standard Operating Procedures, Risk Management Frameworks, Cybersecurity, Privacy and Security as it pertains to all policies and procedures.

Fortune Society - Senior Director, Risk Management & Compliance

01/2022 - 01/2023

Responsible for assessing organizational risk and outcomes based on root cause analysis, monitoring of policies and procedures, corrective action, and continuous auditing.

SOMOS COMMUNITY CARE - Chief Compliance Officer

01/2016 - 01/2021

Oversee full compliance program, including compliance and ethics hotline, risk assessment, technology selection and implementation, corrective actions, audits, compliance reporting, regulatory actions, regulatory agency interactions, and privacy practice enforcement

Ensure compliance with HIPAA, HITECH, Omnibus, NYSDOH, OMIG, and other regulations

Develop policies and procedures

Supervise a staff of 7 supporting 2 locations

Administer $900Kin budgets

Work with human resources on responses to employee incidents

Validate all business associate agreements

Direct employee and management compliance-related training.

EMBLEMHEALTH SERVICES - Compliance Director

01/2010 - 01/2016

Promoted to manage IT compliance, cybersecurity, regulatory filings, audits, KPI monitoring, and more

Planned and led internal reviews and gap analyses of all departments

Maintained the compliance and privacy work plan for audits and activities

Conducted regulatory reviews

Supervised a staff of 10 and administered a $10M budget.

EMBLEMHEALTH SERVICES - Assistant Director, Medical Management Department

01/2002 - 01/2010

Responsible for the electronic health records (EHR) and associated projects

Provided management for the development of interfaces between internal and external systems

Worked with medical directors on program creation to maximize EHR operability and availability

Streamlined workflows internally and with external providers and partners.

ADDITIONAL INFORMATION

MS Office, Visio, Project, SharePoint, Cognos, Oracle, Softheon, MS Business Intelligence Suite, Crystal Reports, data mining, data warehouse tools, EHR applications., Society of Compliance & Corporate Ethics (SCCE), Healthcare Compliance Association (HCA), Health Information Management Systems Society (HIMSS)

TRAINING

Health Information Management Technology Systems Consulting Project Management Root Cause Analysis Implementation & Integration Contract Negotiations Audit Procedures SOX Process Management IT Security Awareness IT Privileged User Cybersecurity Phishing Malware & Ransomware Workplace & Sexual Harassment Compliance & Ethics Medicare & Medicaid Fraud, Waste, and Abuse HIPAA Privacy & Security Risk Management Risk Assessment Family Medical Leave Act American Disabilities Act ISO 27001 HIPAA Chief Compliance Officer Code of Conduct & Conflict of Interest

.

#HRJ#cf9de41e-acc4-4fae-a394-775e38ce9530#

Contact this candidate