HIPAA Privacy Officer

Hopebridge; Indianapolis (IN); On-site; USD 90,000 - 120,000; Full time

Job summary

Hopebridge in Indianapolis, Indiana seeks a HIPAA Privacy Officer to oversee our privacy program and ensure compliance with HIPAA regulations governing PHI access and use. You will develop policies, conduct risk assessments, manage breach investigations, train staff, and serve as the privacy expert across the organization in a full-time, office-based role.

This position requires a bachelor’s degree, at least three years of HIPAA-related experience, and strong communication and organizational

Qualifications

• Requires bachelor’s degree in HR or related field.
• Minimum of three years of related experience.
• Experience with HIPAA required.
• Thorough understanding of privacy laws and regulations including access, release of information, and security technologies.
• Excellent verbal and written communication skills.
• Excellent organizational skills and attention to detail; proficiency with Microsoft Office Suite or related software.

Responsibilities

• Oversee the organization’s HIPAA privacy program and compliance with federal and state regulations.
• Develop, manage, and implement policies and procedures; ensure PHI access and use compliance.
• Conduct HIPAA risk assessments and collaborate with plan management, administration, and legal counsel.
• Maintain records and supporting documentation; manage breach investigation processes and OCR reporting requirements.
• Lead privacy training, communications, and governance activities; serve as internal HIPAA subject matter expert.

Skills

HIPAA knowledge

Communication skills

Organization & detail orientation

Microsoft Office proficiency

Education

Bachelor’s degree in Human Resources or related field

Tools

Microsoft Office Suite

Job description

The HIPAA (Health Insurance Portability and Accountability Act) Privacy Officer will oversee the company’s privacy program. The Privacy Officer will develop, manage, and implement processes to ensure the organization’s compliance with applicable federal and state HIPAA regulations and guidelines, particularly regarding the organization’s access to and use of protected health information (PHI).

Responsibilities

Policy Development & Risk Assessment

• Evaluates the organization’s existing policies and procedures for HIPAA compliance by performing HIPAA risk assessments.
• Collaborates with plan management, administration, and legal counsel to identify and address privacy policies and procedures that require improvement.
• Develops and assists with implementation of new and updated policies and procedures.
• Maintains policies and procedures related to PHI access and use; ensures strict adherence by all staff with access to PHI.

Compliance, Auditing & Breach Management

• Assesses methods and procedures used to store and transmit PHI; identifies security or other compliance risks and researches and recommends improvements.
• Maintains required records and supporting documentation including authorization forms, notices, and plan documents.
• Completes and maintains a breach investigation process and log that ensures full compliance with the Office for Civil Rights breach reporting requirements.
• Reviews and edits all Business Associate Agreements for the company.

Training, Leadership & Communication

• Develops and leads the organization’s health information privacy committee, task force, or similar group.
• Develops and provides training on health information privacy requirements and procedures.
• Communicates with individuals regarding their right to inspect, amend, and restrict access to their PHI.
• Drafts and implements procedures for addressing and resolving complaints regarding the organization’s privacy policies and procedures.

Advisory & Governance

• Serves as the internal subject matter expert on HIPAA, maintaining current knowledge of HIPAA laws and regulations, and any other applicable federal and state privacy laws or regulations.
• Reports on changes in applicable laws and regulations and provides training as needed.
• Makes or facilitates appropriate disciplinary steps and sanctions as needed when any member of the workforce fails to comply with privacy policies.
• Performs other related duties as assigned.

Required Skills

Required Competencies, Education, and Experience

• Bachelor’s degree in Human Resources or related field required.
• Minimum of three (3) years of related experience required.
• Experience with HIPAA required.
• Thorough understanding of related information privacy laws and regulations including those governing access, release of information, and security technologies.
• Excellent verbal and written communication skills with the ability to explain and present complex information clearly and thoroughly.
• Excellent organizational skills, attention to detail, and proficiency with Microsoft Office Suite or related software.

Preferred Competencies, Education, and Experience

• Certifications in privacy compliance (CHC or CHPC).
• SHRM-CP or SHRM-SCP.

Position Type/Expected Hours of Work

This is a full-time position, Monday through Friday. Occasional evening and weekend work may be required as job duties demand.

Travel

No travel is expected for this position.

Work Environment

This job operates in a professional office environment. This role routinely uses standard office equipment such as computers, phones, photocopiers, filing cabinets, and fax machines.

Physical Demands

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. This is largely a sedentary role; however, some filing may be required. This would require the ability to lift files, open filing cabinets and bend or stand on a stool as necessary.