HIPAA Privacy Compliance Lead

Washington University; St. Louis (MO); On-site; USD 75,000 - 129,000; Full time

Job summary

Washington University seeks an Associate HIPAA Privacy Officer to oversee the privacy program for the Faculty Practice Plan. You will ensure HIPAA compliance across the university, medical campus, and health plan, guiding policy development and incident investigations.

You will lead privacy training, supervise the privacy office team, and coordinate breach response, while collaborating with compliance and privacy liaisons to advance patient privacy protections.

Qualifications

• Bachelor’s degree in health information, health care administration, or healthcare-related field.
• Three years direct experience in HIPAA compliance or related healthcare role.

Responsibilities

• Oversees HIPAA Privacy Compliance program for University, Medical School and Health Plan.
• Develops and maintains HIPAA Policies and Procedures; guides privacy training.
• Manages HIPAA Privacy Office staff and oversees privacy incident investigations.
• Assists with patient access requests and breach reporting activities.
• Prepares HIPAA privacy statistics and facilitates quarterly dashboard reporting.
• Directs privacy training for Workforce members and liaises with compliance teams.
• Collaborates on regulatory filings and maintains privacy governance tools.

Skills

HIPAA Compliance

Epic Systems

Health Care Compliance

Risk Assessments

Supervisory Management

Time Management

Written Communication

Oral Communications

Detail-Oriented

Project Management

Education

Bachelor's degree in health information

Master's degree preferred

Tools

Epic Systems

Job description

Washington University seeks an Associate HIPAA Privacy Officer to oversee the privacy program for the Faculty Practice Plan. You will ensure HIPAA compliance across the university, medical campus, and health plan, guiding policy development and incident investigations.

You will lead privacy training, supervise the privacy office team, and coordinate breach response, while collaborating with compliance and privacy liaisons to advance patient privacy protections.