HIPAA Program Manager

Vertisystem (A MOURI Tech Company); Los Angeles (CA); On-site; USD 90,000 - 120,000; Full time

Job summary

Vertisystem (A MOURI Tech Company) is seeking an experienced HIPAA Program Manager in Los Angeles to lead healthcare privacy and compliance initiatives. This role will oversee HIPAA compliance projects, conduct audits and risk assessments, and develop policies to ensure the protection of Protected Health Information (PHI).

The ideal candidate will have over 4 years of experience in healthcare privacy/compliance, relevant certifications, and strong project management skills. You'll play a crucial role in compliance training and evaluation.

Qualifications

• 4+ years of healthcare privacy/compliance experience, including HIPAA governance.
• Strong project management, root-cause analysis, and executive communication skills.
• Experience with PHI lifecycle management and vendor risk assessments.

Responsibilities

• Lead HIPAA compliance monitoring, audits, and risk assessments.
• Develop and operationalize HIPAA policies and SOPs.
• Deliver HIPAA training and awareness programs.

Skills

Healthcare privacy/compliance experience

HIPAA governance

Project management

Executive communication skills

Education

Bachelor’s degree or higher

Certifications (CHC, CHPC, CIPP/US, CIPM)

Tools

Azure

M365

Job description

Contract Duration: 12 months

Job Description:

We are seeking an experienced HIPAA Program Manager to lead healthcare privacy and compliance initiatives in support of a countywide privacy program. This role will oversee HIPAA compliance projects, conduct audits and risk assessments, support incident investigations, develop policies and procedures, and provide guidance on the use and protection of Protected Health Information (PHI).

Key Responsibilities:

• Lead HIPAA compliance monitoring, audits, and risk assessments.
• Conduct Privacy Impact Assessments (PIAs) and HIPAA Security/Privacy evaluations.
• Develop and operationalize HIPAA policies, SOPs, workflows, and implementation guides.
• Deliver HIPAA training, awareness programs, and stakeholder presentations.
• Ensure compliance with HIPAA, HITECH, CMIA, California privacy laws, and related regulations.

Required Experience:

• 4+ years of healthcare privacy/compliance experience, including HIPAA governance, audits, assessments, and training.
• 3+ years of HIPAA incident response, breach notification, and compliance investigations.
• 3+ years leading HIPAA implementation projects or HIPAA-covered entity transitions.
• Experience working with IT teams on HIPAA Security Rule safeguards, access controls, audit logging, encryption, cloud environments (Azure/M365), and data governance.
• Experience with PHI lifecycle management, data retention strategies, vendor risk assessments, and cross-functional compliance programs.
• Strong project management, root‑cause analysis, and executive communication skills.

Qualifications:

• Bachelor’s degree or higher required.
• One or more of the following certifications required:
• CHC (Certified in Healthcare Compliance)
• CHPC (Certified in Healthcare Privacy Compliance)
• CIPP/US (Certified Information Privacy Professional/United States)
• CIPM (Certified Information Privacy Manager)
• Advanced degree (MBA, MHA, LL.M., JD, etc.) may substitute for up to 2 years of required experience.