Privacy Officer

Family & Children's Services; Tulsa (OK); On-site; USD 85,000 - 120,000; Full time

Job summary

Family & Children’s Services is seeking a Privacy Officer to lead the organization’s Privacy Program, ensuring HIPAA, HITECH, and 42 CFR Part 2 compliance. You will oversee breach response, risk assessments, and regulatory reporting while fostering a culture of confidentiality.

The role requires strong collaboration with Compliance, IT, HR, Legal, and Operations, along with developing training initiatives and maintaining privacy-related policies.

Qualifications

• Bachelor's Degree in related field required.
• 3+ years of healthcare privacy or compliance experience.
• Master's degree preferred.

Responsibilities

• Lead the Privacy Program and maintain related policies and procedures.
• Investigate privacy incidents and manage breach notifications.
• Conduct risk assessments and audits for compliance with internal policies and external regulations.
• Develop privacy training initiatives and track staff compliance.
• Oversee Client Rights and Privacy Practices.

Skills

HIPAA knowledge

HITECH knowledge

Privacy governance

Data analysis

Policy management

Cross-functional collaboration

Education

Bachelor's degree

Master's degree

Tools

Microsoft Excel

Policy management software

Reporting systems

Job description

The Privacy Officer is responsible for leading and overseeing the organization’s Privacy Program, ensuring compliance with HIPAA, HITECH, 42 CFR Part 2, and other applicable state and federal regulations. This role manages privacy risk, breach response, and regulatory reporting while promoting a culture of confidentiality and compliance.

POSITION SPECIFIC DUTIES & RESPONSIBILITIES

• Develop, implement, and lead the Privacy Program and maintain Privacy-related policies and procedures.
• Facilitate the investigation of privacy incidents and manage breach notifications.
• Conduct risk assessments and audits to evaluate the effectiveness of the Privacy Program, identify areas of improvement, and ensure compliance with both internal policies and procedures and state and federal regulations.
• Analyze metrics and identify trends to help drive continuous improvement in the Privacy Program.
• Develop, implement, and lead Privacy-related training initiatives in collaboration with internal departments and track Staff compliance.
• Manage regulatory reporting and ensure audit readiness.
• Oversee Client Rights and Privacy Practices
• Mature processes and serve as privacy subject matter expert on cross-functional governance committees.
• Collaborate with Compliance, IT, HR, Legal, Training, and Operations.

QUALIFICATIONS

education:

• Bachelor's Degree in related field is required
• Master's degree preferred

EXPERIENCE

3 + years of healthcare, healthcare privacy or compliance experience.

PERFORMANCE COMPETENCIES

• Communication
• Decision Making
• Engagement
• Initiative and Accountability
• Interpersonal
• Learning
• Organizational Alignment
• Quality of Work

KNOWLEDGE/SKILLS/ABILITIES

• Strong knowledge of HIPAA, HITECH, OCR, and 42 CFR Part 2.
• Knowledge of investigative procedures, internal audit processes, evidence handling, documentation standards, and root-cause analysis.
• Technical proficiency in relevant reporting systems, Microsoft Excel, data analysis tools, and policy management frameworks.
• Ability to partner with Legal, HR, Security, Operations, Compliance, and other internal departments to ensure organizational and regulatory alignment.

CERTIFICATIONS/LICENSES

• Certified in Healthcare Compliance (CHC) or other relevant health compliance certifications (e.g., Certified in Healthcare Privacy Compliance - CHPC) preferred.

OTHER INFORMATION

SAFETY SENSITIVE JOB CLASSIFICATION

This job is classified as a “safety-sensitive” position as defined by the Oklahoma Medical Marijuana and Patient Protection Act. Due to the “safety-sensitive” classification, an employee in this position would be subject to drug and alcohol testing, including random testing. Marijuana is one of the substances included in the drug panel screening. Possession of a medical marijuana license will not excuse you from the testing process or the consequences of testing positive for marijuana per the Family & Children’s Services Drug Free Workplace Policy, including possible revocation of a job offer or dismissal from employment.

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities
This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor.