Assistant Privacy Officer

Berger Health System; Northern (KY); Hybrid; USD 90,000 - 130,000; Full time

Job summary

OhioHealth is seeking a Privacy subject matter expert to ensure compliance with HIPAA and other privacy laws. The role handles investigations, risk assessment, ePHI auditing, and develops privacy training for staff.

The remote Ohio-based position requires a Bachelor's degree in a related field, professional certifications in privacy, and at least five years of healthcare privacy experience. Strong leadership and collaboration across departments are essential.

Qualifications

• Bachelor's Degree in a related field and at least five years of healthcare privacy experience.
• Certifications in CHPC/CHC/CHPS or CIPP required within first year.
• Strong knowledge of HIPAA and related privacy laws.
• Ability to conduct investigations and manage confidential information with discretion.
• Proficient in Microsoft Office and EPIC.

Responsibilities

• Conduct investigations into privacy violations and coordinate corrective actions.
• Develop and deliver privacy training for workforce.
• Participate in governance and risk management meetings to address privacy issues.
• Serve as OhioHealth Privacy Officer writing or editing policies.

Skills

HIPAA knowledge

Investigations

ePHI auditing

Leadership

Policy development

Training delivery

Education

Bachelor's Degree

Field of Study: Business, Health Information Management, Law, or related field

Tools

EPIC

Microsoft Office (Word, Excel, PowerPoint)

Job description

We are more than a health system. We are a belief system. We believe wellness and sickness are both part of a lifelong partnership, and that everyone could use an expert guide. We work hard, care deeply and reach further to help people uncover their own power to be healthy. We inspire hope. We learn, grow, and achieve more – in our careers and in our communities.

Job Description Summary

The purpose of this position is to be OhioHealth's Privacy subject matter expert ensuring OhioHealth's compliance with all applicable federal and state privacy laws including the Health Insurance Portability and Accountability Act (HIPAA). The position has diverse and complex duties necessitating a high level of contact and exposure to highly confidential information. The position will: (1) Conduct investigations where there is an allegation of a privacy violation and manage direct reports that do the same; Conducting investigations includes communicating with patients and stakeholders, conducting interviews, coordinating resolution and implementing corrective action. (2) Participate in the risk assessment process and, as appropriate, develop and implement appropriate controls to mitigate privacy risk. (3) Conduct and/or manage ePHI auditing using a software tool that utilizes machine learning. (4) Develop and, as appropriate, deliver privacy training, including annual and initial workforce privacy education. *This is a Remote position in Ohio.

Responsibilities And Duties

• 50% Responds to questions, concerns, and allegations of noncompliance related to privacy laws and regulations. Response may include communicating with patients, government officials, community members and workforce members. Response may also require a subsequent investigation that may require interviews, fact gathering, analyzing audit logs, developing a root cause analysis, and implementing corrective action plan. A portion of the response includes documentation of response and, as appropriate, the subsequent investigation in a software tool. This work may require coordination with other departments, including but not limited to Information Security, Office of the General Counsel, Human Resources, etc.
• 25% Developing and, as appropriate, providing training, education, and other awareness-building activities designed to promote a culture of privacy protection and related to privacy laws, regulations, and OhioHealth policy.
• 15% Attends and actively participated in appropriate governance and other committees to represent the privacy team and provide guidance. Identifies privacy risks and issues then helps designs solutions and risk management strategies to achieve business objectives while promoting privacy compliance. Tracks, trends, and analyzes privacy data and prepares related reports for leadership and governance bodies.
• 10% Serves as the OhioHealthy Privacy Officer which includes writing or editing applicable policies.

The listed above are not intended to be all inclusive of the duties, responsibilities, and tasks to be performed by an associate in this job. Associate is expected to perform other duties as requested by leadership. As a High Reliability Organization (HRO), responsibilities require focus on safety, quality and efficiency in performing job duties. The job profile provides an overview of responsibilities and duties and is not intended to be an exhaustive list and is subject to change at any time.

Minimum Qualifications

Bachelor's Degree (Required)

Additional Job Description: MINIMUM QUALIFICATIONS

Bachelor's Degree-Field of Study: Business, Health Information Management, Law, or related field.

Years of experience: five (5) years of healthcare privacy or equivalent experience.

Healthcare Privacy Compliance (CHPC), Healthcare Compliance (CHC), Certification in Healthcare Privacy and Security (CHPS), or Certified Information Privacy Professional (CIPP) required within first year of employment.

Specialized Knowledge

Field of Study: Business, Health Information Management, Law, or related Field of Study required.

Knowledge and Experience in Health Information Portability and Accountability Act (HIPAA), other privacy laws, conducting investigations, and experience conducting electronic Protected Health Information (ePHI) auditing.

Able to work independently and as part of a team (inter and intra-departmental teams).

High degree of Integrity and business judgment.

Proficient knowledge of Microsoft Office products (Word, Excel, and PowerPoint) and experience with EPIC electronic medical record.

Experience handling sensitive and confidential information with discretion.

Six (6) years or more progressive related work Experience or Degree including five (5) years related healthcare work experience.

Strong leadership, influencing and relationship-building abilities required.

Demonstrated ability to foster collaboration among diverse team members; develop individuals and teams by providing effective feedback and coaching, delegating, empowering, and removing obstacles.

Desired Attributes

Master’s Degree preferred and certification: Healthcare Privacy Compliance (CHPC), Healthcare Compliance (CHC), Certification in Healthcare Privacy and Security (CHPS), or Certified Information Privacy Professional (CIPP).

ePHI Auditing experience.

Work Shift: Day Scheduled Weekly Hours : 40 Department Ethics And Compliance Office

Equal Employment Opportunity

Equal Employment Opportunity OhioHealth is an equal opportunity employer and fully supports and maintains compliance with all state, federal, and local regulations. OhioHealth does not discriminate against associates or applicants because of race, color, genetic information, religion, sex, sexual orientation, gender identity or expression, age, ancestry, national origin, veteran status, military status, pregnancy, disability, marital status, familial status, or other characteristics protected by law. Equal employment is extended to all person in all aspects of the associate-employer relationship including recruitment, hiring, training, promotion, transfer, compensation, discipline, reduction in staff, termination, assignment of benefits, and any other term or condition of employment.

Remote Work Disclaimer

Positions marked as remote are only eligible for work from Ohio.

We Are Inspired to Do Our Best

OhioHealth is a nationally recognized, innovative healthcare system delivering world‑class patient care in a supportive, professional environment filled with limitless opportunities to learn and grow. We are a unique organization in the healthcare field. Our model system of facilities encompasses a wide scope of expertise and care. For professionals, we are a place where people committed to doing their best are given the tools and resources to accomplish our mission every single day. OhioHealth is recognized as a Great Place to Work CertifiedTM organization. The Great Place to Work® is a global authority on high‑trust, high‑performance workplace cultures. This recognition is one measure of our success in achieving a part of our vision ̶ to be an organization "where people want to work".