Privacy and Security Officer

DESC (Downtown Emergency Service Center); Seattle (WA); On-site; USD 100,000 - 170,000; Full time

Benefits offered by this job

Medical coverage (no employee premiums

Dental coverage

Life insurance

Long-term disability

Employee Assistance Program (EAP)

Flexible Spending Account (FSA)

ORCA card subsidy

Paid Time Off (34 days per year)

Retirement Plan

Job summary

DESC (Downtown Emergency Service Center) seeks a Privacy and Security Officer to lead HIPAA, 42 CFR Part 2 and HMIS security efforts across the agency. The role supports program compliance with applicable laws, regulations, and contracts.

As a member of the QIM team, you will train staff, oversee BAAs, and improve privacy controls while ensuring safe handling of confidential information for people experiencing homelessness and related populations.

Qualifications

• 5 years of experience in non-profit/healthcare/government settings.
• 3–5 years in regulatory or compliance roles.
• Familiarity with Physical/Behavioral Health and shelter systems.
• Strong written and verbal communication skills.
• Ability to organize work under tight timelines and adapt to changing priorities.
• Experience serving individuals facing homelessness or economic hardship.
• Ability to safeguard confidential information.

Responsibilities

• Oversee HIPAA, 42 CFR Part 2 and related privacy programs.
• Serve as HIPAA Privacy and Security Officer and HMIS Security Officer.
• Supervise HIM Technician and ensure compliant records releases.
• Develop, implement and update privacy/security policies and procedures.
• Communicate policy changes to staff and coordinate training.
• Draft, manage BAAs with external entities; support audits.
• Maintain agency-wide electronic archive and client data releases.
• Ensure compliance with laws, HUD, and OMB guidance.
• Participate in leadership meetings and drive agency improvements.

Skills

HIPAA compliance

Regulatory compliance

Training staff

Leadership

Communication

Education

Master's degree in Law/PUBLIC Health/Healthcare Administration/Social Work/Psychology

Job description

Description:Days Off: Saturday, Sunday
Shift: Office Day
Insurance Benefits: Medical (no premiums/payroll deductions for employee coverage), Dental, Life, Long-term Disability
Other Benefits: Employee Assistance Program (EAP), Flexible Spending Account (FSA), ORCA card subsidy, Paid Time Off (34 days per year), Retirement Plan

About DESC:

Recognized nationally as an innovator and leader in developing solutions to homelessness, DESC is a social services organization, supportive housing operator, and licensed behavioral health treatment provider focused on meeting the needs of people experiencing long-term homelessness and living with complex behavioral health and other medical conditions. Approximately 3,000 people are actively receiving services from DESC at any given point in time. Our vision is a community where all people are shown compassion, treated with dignity, and everyone has a safe, stable, and affordable place to call home.

DESC operates five shelter/emergency housing programs,19 permanent supportive housing facilities with over 1,750 units, several hundred additional scattered site apartments, and a range of behavioral health services including outpatient mental health and substance use disorder treatment, residential crisis stabilization, street outreach, mobile crisis response, and treatment for opioid use disorder.

JOB OVERVIEW:

DESC is looking for someone to join its multi-disciplinary Quality & Information Management (QIM) team to help build and maintain a robust information security and clinical compliance program. This position is responsible for acting as the agency’s Privacy and Security officer, as well as acting as a subject matter expert for privacy and information security related issues across the agency. This position will also support the senior program management to ensure programs comply with all applicable laws, regulations, and contract requirements.

MAJOR DUTIES AND RESPONSIBILITIES:

• Oversee HIPAA. 42 CFR Part 2 and related privacy compliance programs while maintaining the integrity of client information, including providing training to staff on the HIPAA Privacy Rule and other privacy policies and regulations.
• Serve as the HIPAA Privacy and Security Officer and HMIS (Homeless Management Information System) Security Officer.
• Supervise the Health Information Management (HIM) Technician and ensure records are released in compliance with applicable state and federal laws.
• Create, implement, and keep up-to-date forms, policies, and procedures that comply with various healthcare privacy and security regulations.
• Monitor and ensure the appropriate dissemination and communication of all regulation, policy, and guideline changes to affected personnel.
• Answer questions and identify issues relating to compliance for staff and management in meetings and direct consultations; Participate as a member of agency senior leadership and be a driver of change for the agency.
• Conduct reviews of programs and data systems to assure compliance and protection of client information.
• Work with the Learning and Development team to implement a robust privacy training program.
• Draft, execute, and oversee business associate agreements (BAAs) with external entities as necessary. Work with Senior Leadership team to ensure adherence to established policies and procedures and facilitate external audits and monitoring and documentation activities.
• Develop, maintain and improve an agency-wide electronic archive system and method for releasing client information.
• Comply with all agency policies and procedures, relevant Washington Administrative Code, RCWs, HIPAA Privacy Rules and King County Behavioral Health Division policies and procedures, HUD regulations, and OMB Uniform Guidance.
• Attend and participate in relevant team meetings, agency sponsored trainings and all-staff meetings.
• Other duties as assigned.

MINIMUM QUALIFICATIONS:

• 5 years of relevant experience in a non-profit, healthcare, or government agency, with an understanding of the challenges facing social service providers.
• 3 - 5 years related regulatory or compliance experience with ability to analyze, write and integrate highly technical information into action plans.
• Familiarity with Physical/Behavioral Health, Supportive Housing and Shelter systems.
• Strong oral and written communication skills and ability to work effectively with staff from various backgrounds and disciplines.
• Ability to organize and coordinate work efficiently; prioritize workload, work under pressure with tight timelines and changing priorities.
• Initiative and creativity in problem solving and system development.
• Willingness to be flexible and work cooperatively with co-workers to accomplish all responsibilities of the team.
• Experience working with individuals challenged by economic disadvantages, homelessness, severe & persistent mental illness and/or substance use disorders.
• Ability to appropriately safeguard and handle confidential and proprietary information.

PREFERRED QUALIFICATIONS:

• Experience managing programs covered by HIPAA regulations
• Master's degree in Law, Psychology, Healthcare Administration, Social Work, or Public Health.
• HIPAA or Health Information Management Certification
• Knowledge of local Behavioral Health implementation systems, policies and protocols and relevant State and Federal regulations.

PHYSICAL DEMANDS:

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. While performing the duties of this job, the employee will be required sit for long periods of time, communicate with other employees by talking and hearing, required to lift and carry items weighing up to 25 pounds and to operate computer hardware systems. Specific vision abilities required by the job include close vision, distance vision, color vision, peripheral vision, depth perception, and the ability to adjust focus.

EQUAL OPPORTUNITY EMPLOYER:

DESC is committed to diversity in the workplace and promotes equal employment opportunities for all staff members and applicants. The Agency will not discriminate against any employee or applicant for employment on the basis of race, creed, color, sex, gender, sexual orientation, age, national origin, caste, marital status, or the presence of any sensory, mental or physical disability in any employment practice, unless based on a bona fide occupational qualification. Minorities and veterans are encouraged to apply.