General Statement of Duties

This position is responsible for monitoring and guiding the organization’s data protection efforts and infrastructure to help ensure the safety and security of member data.  Core outcomes include ensuring member trust, brand protection, and compliance with relevant laws and regulations.

Essential Position Functions

Data Monitoring and Guidance

• Monitor access to PHI and IIHI data to ensure compliance with the Health Insurance Portability and Accountability Act (HIPAA), CFR Part 2 Privacy rules and other state and federal related regulations.
• Investigate privacy incidents and log in incident tracking system to ensure compliance with HIPAA data breach laws.
• Assist with processing individual rights requests pertaining to prior disclosures.
• Address privacy-related questions and provide guidance to the organization’s lines of business and various functional areas.
• Participate in teams and workgroups to further privacy-related goals, serving as a subject matter expert for privacy; advise business units regarding permissible disclosures and necessary restrictions.

Data Infrastructure

• Develop, recommend, and implement privacy-related policies, procedures and related tools.
• Assist with development, presentation and monitoring of privacy-related training.
• Monitor new or proposed privacy-related legislation, notifying stakeholders and updating materials as appropriate.
• Partner with company staff in identifying data structure enhancements and maintenance of databases containing Protected Health Information (PHI) and Individually Identifiable Health Information (IIHI).

Essential Department and Organizational Functions

• Propose and implement process improvements.
• Meet deadlines for completion of workload.
• Maintain agreed upon work schedule.
• Demonstrate cooperation and teamwork.
• Provide cross-training on specific job responsibilities.
• Meet identified business goals that contribute to departmental goals.
• Perform other duties as needed.

Knowledge, Skills and Abilities Required

• Strong working knowledge of privacy-related laws and regulations governing personal information, particularly HIPAA and state data breach laws
• Ability to research, interpret and understand laws, regulations and other regulatory and compliance guidance
• Ability to understand and apply complex legal language and terminology
• Strong written and verbal communication and documentation skills
• Ability to lead and address diverse groups at all levels of the organization to affect change and serve as a champion for privacy
• Capable of managing multiple tasks simultaneously and prioritizing work to meet assigned deadlines, ensuring appropriate time and attention required
• Strong analytical skills and attention to detail
• Proficient technology skills, including word processing, spreadsheets and working in internal and external databases
• Strong work ethic
• Effective collaboration skills

Education and/or Experience

Minimum 5 years’ experience required in audit, compliance, or systems fields, including minimum 3 years’ experience specific to data privacy and security, preferably with a HIPAA covered entity.  Professional compliance or privacy designation such as Certified in Healthcare Privacy Compliance preferred.

Working Conditions

• Environment:  This position’s primary responsibilities typically take place in the following environment(s) (check all that apply on a regular basis):

? Inside/office            ? Clinics/health facilities         ? Member homes

? Other_________________________________________

• Travel:  This position may include occasional required or optional travel outside of the workplace, in which the employee’s personal vehicle, local transit, or other means of transportation may be used.
• Equipment:  General office equipment
• Hazards:  n/a

Candidates of color are strongly encouraged to apply. CareOregon is committed to building a linguistically and culturally diverse and inclusive work environment

Veterans are strongly encouraged to apply. 

Equal opportunity employer.  This company considers all candidates regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status.