Privacy and Security Officer

Downtown Emergency Service Center; Headquarters; On-site; CAD 125,000 - 180,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Life insurance

Long-term disability

Employee Assistance Program (EAP)

Flexible Spending Account (FSA)

ORCA card subsidy

Paid Time Off (34 days per year)

Retirement Plan

Job summary

Downtown Emergency Service Center (DESC) is seeking a Privacy and Security Officer to lead HIPAA compliance and HMIS security within its multi-disciplinary Quality & Information Management team. You will develop, implement, and maintain privacy policies, train staff, and guide program compliance with state and federal regulations.

The role involves collaboration with senior leadership, external audits, and responsible handling of confidential information across the agency to support DESC’s

Qualifications

• Experience implementing HIPAA privacy/security programs.
• Ability to analyze complex regulatory information and translate into action plans.
• Strong written and oral communication with diverse staff.

Responsibilities

• Oversee HIPAA, 42 CFR Part 2 and related privacy programs.
• Serve as HIPAA Privacy and Security Officer and HMIS Security Officer.
• Supervise HIM Technician and ensure compliant records release.
• Create and maintain privacy/security policies and forms.
• Disseminate regulation changes to staff and management.
• Advise leadership on compliance issues and drive agency changes.
• Audit programs and data systems for privacy protections.
• Collaborate with Learning to implement privacy training.
• Draft and manage BAAs with external entities.
• Maintain agency-wide electronic archive and client release processes.
• Ensure compliance with HIPAA, HUD, OMB, and related policies.

Skills

HIPAA compliance

Regulatory analysis

Policy development

Communication skills

Education

Master's degree in Law, Healthcare Administration, Public Health, Psychology, or Social Work

Tools

HIM Systems

Job description

Description

Days Off: Saturday, Sunday
Shift: Office Day
Insurance Benefits: Medical (no premiums/payroll deductions for employee coverage), Dental, Life, Long-term Disability
Other Benefits: Employee Assistance Program (EAP), Flexible Spending Account (FSA), ORCA card subsidy, Paid Time Off (34 days per year), Retirement Plan

About DESC:

Recognized nationally as an innovator and leader in developing solutions to homelessness, DESC is a social services organization, supportive housing operator, and licensed behavioral health treatment provider focused on meeting the needs of people experiencing long-term homelessness and living with complex behavioral health and other medical conditions. Approximately 3,000 people are actively receiving services from DESC at any given point in time. Our vision is a community where all people are shown compassion, treated with dignity, and everyone has a safe, stable, and affordable place to call home.

DESC operates five shelter/emergency housing programs,19 permanent supportive housing facilities with over 1,750 units, several hundred additional scattered site apartments, and a range of behavioral health services including outpatient mental health and substance use disorder treatment, residential crisis stabilization, street outreach, mobile crisis response, and treatment for opioid use disorder.

JOB OVERVIEW:

DESC is looking for someone to join its multi-disciplinary Quality & Information Management (QIM) team to help build and maintain a robust information security and clinical compliance program. This position is responsible for acting as the agency’s Privacy and Security officer, as well as acting as a subject matter expert for privacy and information security related issues across the agency. This position will also support the senior program management to ensure programs comply with all applicable laws, regulations, and contract requirements.

MAJOR DUTIES AND RESPONSIBILITIES:

• Oversee HIPAA. 42 CFR Part 2 and related privacy compliance programs while maintaining the integrity of client information, including providing training to staff on the HIPAA Privacy Rule and other privacy policies and regulations.
• Serve as the HIPAA Privacy and Security Officer and HMIS (Homeless Management Information System) Security Officer.
• Supervise the Health Information Management (HIM) Technician and ensure records are released in compliance with applicable state and federal laws.
• Create, implement, and keep up-to-date forms, policies, and procedures that comply with various healthcare privacy and security regulations.
• Monitor and ensure the appropriate dissemination and communication of all regulation, policy, and guideline changes to affected personnel.
• Answer questions and identify issues relating to compliance for staff and management in meetings and direct consultations; Participate as a member of agency senior leadership and be a driver of change for the agency.
• Conduct reviews of programs and data systems to assure compliance and protection of client information.
• Work with the Learning and Development team to implement a robust privacy training program.
• Draft, execute, and oversee business associate agreements (BAAs) with external entities as necessary. Work with Senior Leadership team to ensure adherence to established policies and procedures and facilitate external audits and monitoring and documentation activities.
• Develop, maintain and improve an agency-wide electronic archive system and method for releasing client information.
• Comply with all agency policies and procedures, relevant Washington Administrative Code, RCWs, HIPAA Privacy Rules and King County Behavioral Health Division policies and procedures, HUD regulations, and OMB Uniform Guidance.
• Attend and participate in relevant team meetings, agency sponsored trainings and all-staff meetings.
• Other duties as assigned.

Requirements

MINIMUM QUALIFICATIONS:

• 5 years of relevant experience in a non-profit, healthcare, or government agency, with an understanding of the challenges facing social service providers.
• 3 - 5 years related regulatory or compliance experience with ability to analyze, write and integrate highly technical information into action plans.
• Familiarity with Physical/Behavioral Health, Supportive Housing and Shelter systems.
• Strong oral and written communication skills and ability to work effectively with staff from various backgrounds and disciplines.
• Ability to organize and coordinate work efficiently; prioritize workload, work under pressure with tight timelines and changing priorities.
• Initiative and creativity in problem solving and system development.
• Willingness to be flexible and work cooperatively with co-workers to accomplish all responsibilities of the team.
• Experience working with individuals challenged by economic disadvantages, homelessness, severe & persistent mental illness and/or substance use disorders.
• Ability to appropriately safeguard and handle confidential and proprietary information.

PREFERRED QUALIFICATIONS:

• Experience managing programs covered by HIPAA regulations
• Master’s degree in Law, Psychology, Healthcare Administration, Social Work, or Public Health.
• HIPAA or Health Information Management Certification
• Knowledge of local Behavioral Health implementation systems, policies and protocols and relevant State and Federal regulations.

PHYSICAL DEMANDS:

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. While performing the duties of this job, the employee will be required sit for long periods of time, communicate with other employees by talking and hearing, required to lift and carry items weighing up to 25 pounds and to operate computer hardware systems. Specific vision abilities required by the job include close vision, distance vision, color vision, peripheral vision, depth perception, and the ability to adjust focus.

EQUAL OPPORTUNITY EMPLOYER:

DESC is committed to diversity in the workplace and promotes equal employment opportunities for all staff members and applicants. The Agency will not discriminate against any employee or applicant for employment on the basis of race, creed, color, sex, gender, sexual orientation, age, national origin, caste, marital status, or the presence of any sensory, mental or physical disability in any employment practice, unless based on a bona fide occupational qualification. Minorities and veterans are encouraged to apply.