Arvada, CO, USA

Channin G.

Empowering Healthcare with Compliance and Privacy Excellence

Channin Gladden is a beacon in healthcare compliance, privacy, and cybersecurity, showcasing an impressive trajectory from startup environments to leading enterprise-level initiatives. Gladden's expertise spans risk management, compliance oversight, AI, and emerging technologies, all underpinned by a solid grounding in legal frameworks like HIPAA, CCPA, and GDPR. At the core, Gladden is driven by a mission to weave ethics into the fabric of healthcare organizations, ensuring they not only meet regulatory demands but thrive within them. Leadership, innovation, and an unwavering commitment to privacy and security define Gladden's approach, delivering tailored programs that foster a culture of compliance and propel organizational success.

Hire Channin

Data Analysis Auditing Business Analysis HIPAA Research Information Technology Internal Controls Risk Assessment

Fractional Director of Compliance rates

Work

Tamed Trackers for a Healtech Startup

A healthtech startup was named in a national article alleging telehealth providers were sharing personal information with adtech. Gladden led a cross-functional, executive level team in resolving the issue and bringing the company into compliance with privacy regulations. Risk was reduced and compliance attained by:

*Investigating and auditing the use of trackers throughout the organization;

*Developing a tracker policy that reflected the organization's business model and risk tolerance;

*Implementing FreshPaint, a HIPAA-compliant customer data platform (CDP) to mask PHI; and

*Developing governance structures to ensure continued compliance.

Auditing HIPAA Risk Assessment Continuous Process Improvement Public Policy

SOC2 Success!

SOC2 enables small businesses to assure their partners that they can be trusted with sensitive information and most healthcare payers require it to partner with them. A telehealth startup needed a SOC2 Type II report quickly, and Gladden jumped in and led the effort. In less than a year, she attained a clean SOC2 report for the organization. After the organization merged with another telehealth startup, she successfully led the effort to merge the controls and combine two SOC2 reports into one. To ensure the organization's success Gladden:

*Assigned controls to people across the organization, including the People Team, IT, Security, Engineering, and Legal;

*Provided training and guidance to control owners on their responsibilities and the timelines;

*Implemented Hyperproof to manage controls, evidence collection, and centralize audit communication;

*Selected an auditor that worked with Hyperproof to ensure a seamless audit engagement; and

*Worked with the auditor to define an examination period that met the SOC2 requirements but expedited the process.

Innovation Management Regulatory Compliance Auditing HIPAA Internal Controls

Big Data Wasn't a Big Problem

An enterprise healthcare provider undertook a bold initiative to create an enterprise data warehouse to use big data to solve complex healthcare problems. As the IT Privacy Officer, Gladden provided the requirements for the privacy and security controls and worked with the engineering team to ensure they were implemented effectively. By distilling regulatory and policy requirements into actionable technical requirements, Gladden enabled the engineering team to create a secure environment for patient data where data scientists could develop models to improve patient care. As a result, the provider is now a leader in AI and machine learning in healthcare.

Innovation Management Regulatory Compliance Public Policy Continuous Process Improvement HIPAA

Experience

Aug 2021 — Oct 2024

Thirty Madison

Governance, Risk, Compliance, and Privacy

Thirty Madison is rebuilding the healthcare experience for the modern consumer, leveraging cutting-edge technology to provide virtual-first, accessible healthcare solutions tailored to individual needs.

Developed a compliance program aligned with OIG’s Seven Elements, ensuring adherence to HIPAA, FTC, and state privacy laws, significantly reducing regulatory risk.
Established and chaired the Compliance Governance Committee, enhancing oversight and accountability at the senior leadership level.
Led a comprehensive audit of tracking technologies, aligning organizational risk tolerance and reducing critical risks.
Successfully managed the company’s first SOC2 Type II audit, unlocking new business opportunities and enhancing market credibility.

Apr 2019 — Aug 2021

Very Good Security

Compliance and Privacy Leader

VGS is the world’s largest cloud-based tokenization platform, specializing in PCI descoping, payments orchestration, and omnichannel matching.

Partnered with product and marketing teams to embed compliance into business strategies, ensuring PCI-DSS regulatory alignment.
Provided thought leadership through privacy regulation webinars, enhancing industry credibility and customer trust.
Spearheaded compliance efforts for PCI-DSS, HIPAA, and GDPR, aligning product development with regulatory standards.

Jun 2015 — Oct 2018

Dignity Health

Cybersecurity Governance, Risk, Compliance Manager

Dignity Health provides quality, compassionate health care through more than 40 hospitals and care centers across California, Arizona, and Nevada.

Managed and developed a high-performing team focused on risk mitigation, HIPAA and PCI-DSS compliance, and vulnerability management.

Dec 2011 — Jun 2015

Dignity Health

IT Privacy and Compliance Manager

Directed the development and implementation of enterprise-level privacy and security controls for the data warehouse initiative, enabling advanced predictive modeling and to proactively reduce negative health outcomes.

Jan 2011 — Dec 2011

Arizona Department of Economic Security

Enterprise Risk Management Director

The Arizona Department of Economic Security (DES) provides support to nearly 3 million individuals and families in Arizona, offering assistance for those in need and care for the vulnerable.

Developed an enterprise risk management strategy to drive efficiency and direct resources to areas of greatest risk.

Jul 2000 — Apr 2007

Office of the Auditor General of Arizona

Senior Performance Auditor

The Office of the Auditor General of Arizona serves as the state's 'watchdog,' ensuring that agencies, counties, universities, community college districts, and school districts are using resources effectively and as intended.

Conducted strategic audits of regulatory boards to identify operational efficiencies, strengthen compliance with legal and regulatory frameworks, and drive continuous process improvement.

Channin G.

Empowering Healthcare with Compliance and Privacy Excellence