Associate HIPAA Privacy & Data Security Director at Privia Health

United States

$118k - $128k

<h3>Company Description</h3><p>Privia Health™ is a technology-driven, national physician enablement company that collaborates with medical groups, health plans, and health systems to optimize physician practices, improve patient experiences, and reward doctors for delivering high-value care in both in-person and virtual settings. The Privia Platform is led by top industry talent and exceptional physician leadership, and consists of scalable operations and end-to-end, cloud-based technology that reduces unnecessary healthcare costs, achieves better outcomes, and improves the health of patients and the well-being of providers.</p><h3>Job Description</h3><p>Under the direction of the Chief Privacy Officer and in close collaboration with the Chief Information Security Officer, the Associate Privacy &amp; Data Security Director will assist with maintaining an effective privacy and data security program, including, but not limited to providing consultative services on privacy and patient confidentiality issues, developing and reviewing policies and procedures, and oversee the privacy and data security program.</p><p>Primary Job Duties:</p><ul><li>Initiates, facilitates, and promotes activities to foster a culture of privacy and data security compliance within Privia</li><li>Provides guidance and direction on HIPAA Privacy and Security rules and other applicable federal and state health care privacy laws</li><li>Assists in the development, implementation, and maintenance of administrative, physical, and technical safeguards for personally identifiable data, including, but not limited to managing user access, enforcing least-privilege principles, and maintaining system audit logs</li><li>Periodically reviews and proposes revisions to Privia’s Privacy and Security Policies and Procedures and guidance materials to facilitate compliance with new privacy or cybersecurity-related laws/regulations or changes to existing federal, state, and local privacy or cybersecurity rules and regulations</li><li>Collaborates with the CPO and CISO on the development of privacy and security training modules</li><li>Assists ongoing privacy and security compliance monitoring and auditing activities, including staff awareness programs on phishing, ransomware, and insider threats</li><li>In collaboration with the CPO and CISO, supports investigations of privacy and security incidents, breach risk assessments, and reporting to affected individuals and, when needed, HHS-OCR or other applicable agencies</li><li>Maintains rapport with all business units to facilitate spirit of collaboration</li><li>Collaborates with Information Security including conducting and reviewing security risk assessments to facilitate the implementation of effective mitigation of identified risks</li><li>Assists with the implementation and management of PCI-DSS standards and SOX controls</li><li>Other duties as assigned</li></ul><h3>Qualifications</h3><ul><li>Demonstrated knowledge in HIPAA Privacy, HIPAA Security, applicable state Privacy statutes and regulations, NIST Cybersecurity framework, 405(d) Health Industry Cybersecurity Practices, PCI, and SOX</li></ul><ul><li>Working knowledge of medical group operation processes</li></ul><ul><li>Ability to detect deficiencies in processes and determine needs to improve outcomes</li></ul><ul><li>5+ years of general healthcare privacy and security compliance experience with knowledge of medical group operations and physician services</li></ul><ul><li>5+ years of experience in regulatory research and knowledge of federal, state healthcare privacy and security requirements</li></ul><ul><li>HIPAA Privacy Officer or Security Officer experience preferred</li></ul><ul><li>Certified in Healthcare Privacy Compliance (CHPC) or other relevant certifications strongly preferred.</li></ul><p>The salary range for this role is $118,000-$128,000 in base pay and exclusive of any bonuses or benefits (medical, dental, vision, life, and pet insurance, 401K, paid time off, and other wellness programs). This role is also eligible for an annual bonus targeted at 15% and restricted stock units. The base pay offered will be determined based on relevant factors such as experience, education, and geographic location.</p><h3>Additional Information</h3><p>All your information will be kept confidential according to EEO guidelines.</p><p><strong>Technical Requirements (for remote workers only, not applicable for onsite/in office work):</strong></p><p><strong>In order to successfully work remotely, supporting our patients and providers, we require a minimum of 5 MBPS for Download Speed and 3 MBPS for the Upload Speed. This should be acquired prior to the start of your employment. The best measure of your internet speed is to use online speed tests like <a href="https://www.speedtest.net/">https://www.speedtest.net/</a>. This gives you an update as to how fast data transfer is with your internet connection and if it meets the minimum speed requirements. Work with your internet provider if you have questions about your connection. Employees who regularly work from home offices are eligible for expense reimbursement to offset this cost.</strong></p> <p>Privia Health is committed to creating and fostering a work environment that allows and encourages you to bring your whole self to work. We understand that healthcare is local and we are better when our people are a reflection of the communities that we serve. Our goal is to encourage people to pursue all opportunities regardless of their age, color, national origin, physical or mental (dis)ability, race, religion, gender, sex, gender identity and/or expression, marital status, veteran status, or any other characteristic protected by federal, state or local law.  </p>