Director of IT Security & HIPAA Compliance (Remote)

UofL Health; United States; Remote; USD 150,000 - 190,000; Full time

Job summary

UofL Health is seeking a Director of IT HIPAA Security to lead a comprehensive HIPAA security program addressing PHI privacy, security controls, and compliance. The role supervises auditing of IT systems, develops risk-based strategies, and collaborates with legal and administration to improve privacy policies.

The candidate will oversee policy implementation, educate staff on ePHI security, and manage incident response, regulatory compliance, and ongoing risk management within a major regional

Qualifications

• Bachelor’s degree in related field (required)
• Advanced degree in related field (preferred)
• Minimum five (5) years of experience in information security or related field (required)
• Five (5) years of HIPAA Privacy regulatory requirements (required)
• Experience in developing and administering a healthcare privacy program (preferred)

Responsibilities

• Oversees all audit activities for information systems and reviews results for trends
• Builds a strategic and comprehensive HIPAA security program
• Oversees development and implementation of HIPAA and information security policies
• Educates workforce on standards and procedures related to security of ePHI
• Manages Incident Reporting and Response system for security incidents
• Evaluates security trends and mitigates risk as necessary
• Ensures compliance with HIPAA Security Rule requirements

Skills

Project management

HIPAA knowledge

Information security

Leadership

Policy development

Education

Bachelor’s degree

Advanced degree

Tools

Windows OS

Antivirus software

Vulnerability scanners

Job description

UofL Health is seeking a Director of IT HIPAA Security to lead a comprehensive HIPAA security program addressing PHI privacy, security controls, and compliance. The role supervises auditing of IT systems, develops risk-based strategies, and collaborates with legal and administration to improve privacy policies.

The candidate will oversee policy implementation, educate staff on ePHI security, and manage incident response, regulatory compliance, and ongoing risk management within a major regional