Privacy Officer

Navia; United States; On-site; USD 80,000 - 100,000; Full time

Benefits offered by this job

Competitive Salary Range

Company-sponsored wellness benefits

Life Insurance

Paid time off

Holidays

Work from home / Hybrid schedules

Job summary

Navia is seeking a Privacy Officer to ensure HIPAA and privacy rule compliance across the organization. You will develop, implement, and oversee privacy policies and procedures to safeguard PHI and PII while coordinating with the Fraud Team on incident response and regulatory notifications.

The role leads privacy training, risk assessments, audits, and ongoing program evaluation, acting as the liaison with regulators and clients.

Qualifications

• Minimum of 5 years in healthcare compliance or privacy
• Knowledge of Privacy Rule, Security Rule, and Breach Notification Rule
• Ability to interpret regulations and apply practically
• Ability to train staff and educate employees

Responsibilities

• Advise on privacy obligations and breach analyses with Fraud Team
• Develop and implement privacy policies and procedures
• Create and deliver privacy training
• Monitor and enforce privacy regulations across the organization
• Conduct privacy risk assessments and mitigate risks
• Coordinate internal audits and liaise with external auditors
• Identify and map processing of personal data and contribute to SOC risk reviews
• Evaluate the effectiveness of the privacy program and recommend enhancements

Skills

Analytical thinking

Problem solving

Communication skills

Interpersonal skills

Leadership

Integrity & discretion

Education

Bachelor's degree in healthcare administration or related field

Master's degree preferred

CHPC or CIPP certification

Job description

We’re a people first benefit administrator that relies on a fast-growing team of creative thinkers, problem-solvers, and go-getters to bring our participant and client experience to the next level. Our mission? To create better lives and provide a simple and amazing benefits experience. If you love providing excellent service, innovating the way benefits are administered, and being part of an inclusive workplace community, you’ll fit right in.

We are seeking a highly skilled and knowledgeable individual to join our team as a Privacy Officer. The Privacy Officer will be responsible for ensuring compliance with the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule as well as other federal and state privacy requirements within our organization. This role involves developing, implementing, and overseeing privacy policies and procedures to safeguard protected health information (PHI) and personally identifiable information (PII) and ensure confidentiality. The Privacy Officer will serve as the primary point of contact for privacy compliance inquiries, privacy training, audits, and privacy-specific incident guidance, while working directly with the Fraud Team under Service, which owns overall incident intake, coordination, and operational handling.

What You’ll Do:

• · Support privacy-related incident response by advising on privacy obligations, regulatory requirements, documentation, and breach notification analysis, while the Fraud Team under Service owns overall incident handling and cross-departmental coordination.
• · Partner with the Fraud Team to provide privacy-specific input on communications, corrective actions, process updates, regulatory notification requirements, and related documentation when an incident involves PHI, PII, or other privacy obligations.
• · Develop, maintain, and update privacy incident procedures, including breach notification requirements, privacy investigation protocols, and privacy-related corrective actions, in coordination with the Fraud Team’s operational incident response process.
• · Develop and Implement Privacy Policies: Design and implement comprehensive privacy policies and procedures in accordance with federal regulations and industry best practices.
• · Privacy Training and Education: Create and implement regular training for employees to educate them about the rules and regulations, privacy practices, and their responsibilities in protecting information.
• · Privacy Compliance Oversight: Monitor and enforce compliance with privacy regulations throughout the organization, including proper handling, storage, and transmission of PHI.
• · Privacy Risk Assessment: Conduct periodic risk assessments to identify potential vulnerabilities in PHI security and privacy practices and develop strategies to mitigate risks.
• · Privacy Audits and Monitoring: Coordinate and oversee internal audits to assess compliance with privacy requirements and collaborate with external auditors as needed.
• · Conduct a data impact assessment: Identify and minimize risks associated with the processing of personal data. Ongoing review against privacy impact assessment and mapping of collection, use, and sharing of PII. Contribute to all risk assessments under our SOC.
• · Privacy Program Evaluation: Regularly evaluate the effectiveness of the organization's privacy program and make recommendations for enhancements or improvements as necessary.
• · Compliance Liaison: Serve as the organization's primary liaison with regulatory agencies, legal counsel, clients, and other stakeholders on matters related to privacy compliance.
• · Stay Informed on Regulatory Changes: Stay abreast of developments and changes in regulations, as well as emerging trends and best practices in healthcare privacy and security.

Candidates within 30 miles of one of our four office locations may be asked to come into the office for a hybrid schedule depending on the role.

Eligible candidates will reside in one of the following states: AZ, CA, CO, FL, GA, IA, IL, IN, KS, MA, ME, MI, MN, MO, MT, NC, ND, NE, NJ, NV, NY, OH, OR, PA, SD, TN, TX, UT, AND WA

Why Join Navia?

• Impact: Play a pivotal role in supporting employers and employees nationwide.
• Growth: Advance your skills with a team committed to excellence and innovation.
• Culture: Join a company that values collaboration, innovation, andcustomer-first solutions.

Perks and Benefits:

• Competitive Salary Range: $80,000-$100,000 Annually
• Companysponsored wellness benefits
• Complimentary Life Insurance and Long-Term Disability Insurance
• Paid time off
• 6 Paid Holidays & 2 Paid Floating Holidays
• Work from home and hybrid schedules available!

Requirements

What We’re Looking For:

• Bachelor's degree in healthcare administration, business administration, information technology, or related field (Master's degree preferred).
• Certified in Healthcare Privacy Compliance (CHPC) or Certified Information Privacy Professional (CIPP) certification preferred.
• Minimum of 5 years of experience in healthcare compliance, privacy, or related field.
• In-depth knowledge of regulations, including the Privacy Rule, Security Rule, and Breach Notification Rule.
• Some knowledge of state privacy laws.
• Strong analytical and problem-solving skills, with the ability to interpret complex regulatory requirements and apply them to practical scenarios.
• Excellent communication and interpersonal skills, with the ability to effectively train and educate staff members at all levels of the organization.
• Demonstrated leadership abilities, with a track record of effectively managing privacy initiatives and driving organizational change.
• High level of integrity and discretion, with a commitment to maintaining confidentiality and protecting patient privacy.