Director, IT HIPAA Security

University Medical Center; États-Unis; À distance; USD 140 000 - 200 000; Plein temps

Résumé du poste

UofL Health is seeking a Director of IT HIPAA Security to lead a comprehensive HIPAA security program ensuring PHI protection and regulatory compliance across the organization. You will supervise IT security audits, guide policy updates, and collaborate with legal and administration to strengthen privacy controls.

Responsibilities include governance of risk assessments, workforce training, incident response, and alignment with HIPAA Security Rule requirements.

Qualifications

• Bachelor's degree in related field is required.
• Advanced degree in related field preferred.

Responsabilités

• Oversee all audit activities for IT systems and review results for trends.
• Build and manage a comprehensive HIPAA security program to protect ePHI.
• Develop and implement HIPAA and information security policies, standards and procedures.

Connaissances

Project management

HIPAA regulations

Information security

Policy development

Stakeholder collaboration

Formation

Bachelor's degree (related field)

Advanced degree (preferred)

Description du poste

Primary Location:

Work From Home - KY - ULP - AMG

Address:

Home Office

Remote, KY 40601

Shift:

First Shift (United States of America)

Job Description Summary:

About UofL Health:

UofL Health is a fully integrated regional academic health system with five hospitals, four medical centers, nearly 200 physician practice locations, more than 700 providers, the Frazier Rehab Institute and Brown Cancer Center.

With more than 12,000 team members-physicians, surgeons, nurses, pharmacists and other highly skilled health care professionals-UofL Health is focused on one mission: delivering patient-centered care to each and every patient each and every day.

Job Description:

Position Summary and Purpose

The Director of IT HIPAA Security will oversee the management and implementation of a comprehensive information and HIPAA security program to ensure organizational compliance with applicable federal and state HIPAA regulations and guidelines, particularly regarding the organizations access to and use of protected health information (PHI). The director will oversee the team responsible for the auditing of IT systems, will evaluate the organizations existing policies and procedures for HIPAA compliance by performing HIPAA risk assessments, collaborates with plan management, administration, and legal counsel to identify and address privacy policies and procedures that require improvement and develop and assist with implementation of new and updated policies and procedures.

Essential Functions:

• Oversees all audit activities for information systems and reviews results for trends, as needed
• Builds a strategic and comprehensive HIPAA security program that minimizes risk and ensures integrity, confidentiality, and availability of ePHI
• Oversees the development and implementation of HIPAA and information security policies, standards and procedures; coordinates with key Information System offices, data custodians and governance groups in the development of such policies
• Ensures all workforce members are educated on standards and procedures related to security of ePHI
• Oversees the Incident Reporting and Response system to address security incidents (breaches), responds to alleged policy violations, or complaints from external parties
• Evaluates security trends, evolving threats, risks and vulnerabilities and applies tools to mitigate risk as necessary
• Manages ongoing risk assessment program targeting HIPAA and information security matters; recommends methods for vulnerability detection, remediation, and vulnerability testing
• Ensures that the organization is following mandated HIPAA Security Rule requirements for administrative, technical and physical safeguards

Other Functions:

• Ensures team remains aware of latest security and privacy legislation, regulations, advisories, alerts and vulnerabilities pertaining to UofL Health
• Collaborates with Information Technology as needed for Recovery Planning, Business Downtime Planning and other projects, as needed
• Ensures that audit controls are in place to monitor activity on electronic systems that contain or use ePHI
• Maintains compliance with all company policies, procedures and standards of conduct
• Complies with HIPAA privacy and security requirements to maintain confidentiality at all times
• Performs other duties as assigned

Additional Job Description:

Job Requirements

(Education, Experience, Licensure and Certification)

Education:

• Bachelor's degree in related field (required)
• Advanced degree in related field (preferred)

Experience:

• Minimum five (5) years of experience in information security, information technology, or related field (required)
• Five (5) years of experience in HIPAA Privacy regulatory requirements (required)
• Experience in developing and administering a healthcare privacy program (preferred)

Licensure:

• N/A

Certification:

• N/A

Job Competency:

Knowledge, Skills, and Abilities critical to this role:

• Demonstrated project management skills
• Ability to work collaboratively with a broad range of constituencies
• Working knowledge of policy and regulatory environment of HIPAA and information security, especially in medical field including HIPAA regulations, requirements, and guidelines and related information privacy laws and regulations including those governing access, release of information, and security technologies
• Exemplifies service excellence - responsive, informs constituents of process, pleasant to work with, educates and provides timely, accurate information
• Displays strong organizational skills - manages time effectively, keeps tasks appropriately prioritized and delegates appropriately; works proactively- anticipates and plans for problems before they arise; is able to perform work in a neat, efficient, well-coordinated, well communicated manner with a high degree of accuracy and professionalism
• Role models strong work ethic - motivated, diligent, industrious and persistent in the workplace, stays on tasks to completio