Senior Compliance & Privacy Specialist

Beth-Israel-Lahey-Health; Boston (MA); On-site; USD 80,000 - 110,000; Full time

Job summary

Beth Israel Lahey Health is seeking a Senior Compliance and Privacy Specialist to lead privacy and information security initiatives across the organization. You will collaborate with leadership, conduct investigations, and help draft and maintain policies to reflect current laws and guidance.

The role requires 3+ years in privacy/security within healthcare, HIPAA/HITECH expertise, and strong communication and leadership skills. Occasional cross-functional work and training programs are expected.

Qualifications

• Bachelor's degree required.
• Professional privacy certifications (e.g., CIPP, CIPM, CHC, CHP) preferred.
• Minimum 3 years of experience in information privacy or security and healthcare compliance.
• Must have HIPAA and HITECH knowledge and experience.
• Fluency in federal and state laws, regulations, and guidance related to information privacy and security.
• Demonstrated leadership and formal/informal influence skills.
• Ability to work independently and in a team environment.
• Excellent organizational, oral and written communication, and interpersonal skills.

Responsibilities

• Lead investigations and triage inquiries related to privacy and compliance.
• Draft, implement, and maintain policies and procedures to reflect current requirements.
• Develop and deliver outreach, training, and communication programs on privacy and information security.
• Serve as subject matter expert on patient privacy and information security across the organization.
• Prepare reports, dashboards, and data visualizations to support findings and oversight.
• Assist with auditing and monitoring activities related to privacy and compliance.
• Support risk assessment planning and execution; identify high risk areas.
• Collaborate with leadership to improve compliance and customer service.

Skills

HIPAA knowledge

HITECH knowledge

Leadership

Communication skills

Independent work

Microsoft Office

Data analysis

Interpersonal skills

Teamwork

Education

Bachelor's degree

Professional privacy certifications preferred

Tools

Microsoft Word

Microsoft Excel

PowerPoint

Access

Job description

When you join the growing BILH team, you're not just taking a job, you're making a difference in people's lives. The Senior Compliance and Privacy Specialist will, with direction from system leadership, work with the BILH community to facilitate compliance with the Code of Conduct, policies, procedures, regulations, and guidelines pertaining to patient privacy and information security, and general compliance matters.

The Senior Compliance and Privacy Specialist supports the business objectives of the BILH Compliance and Privacy Programs.

This position will have a high-level of visibility, working with constituents at all levels of BILH community, and requires professionalism, leadership, collaboration, excellent decision-making skills, and innovation.

Responsibilities

• Conducting and coordinating investigations;
• Handling and/or triaging incoming inquiries, concerns, and other matters;
• Draft, implement, and revise / maintain policies/procedures/guidance in a clear, concise manner that reflects current requirements;
• Develop and implement outreach, training and communication programs and serve as an expert resource for patient privacy and information security compliance, as well as general compliance inquiries / issues / projects.

Job Description

• 1. Use expert knowledge of federal, state, local, regulations and guidance, Code of Conduct, investigatory best practices, confidentiality, and policies and procedures to effectively work with organizational partners throughout the investigatory process, leading investigations as applicable.
• 2. Conduct ongoing review of policies and procedures, working with leadership to ensure correction and education as necssary. Ensure that local, state, and federal regulations and guidelines are correctly applied and appropriately described in policies, procedures, and guidance. Draft, update, and maintain policies and procedures in partnership with BILH leadership and organizational partners as needed.
• 3. Training communication, and advisory services: Work with BILH leadership to identify, develop, and implement continuous training and communication to the BILH community, enhancing workforce awareness.
• 4. Serves as a subject matter expert / consultant on patient privacy and information security issues to all areas and all levels of the BILH community. Serve on organizational committees related to patient privacy and information security and general compliance matters.
• 5. Anticipate reporting requirements and participate in the development of materials and updates for Integrity and Compliance and BILH leadership. Perform data analysis. Identify trends. Prepare visual graphics and written materials to support findings. Develop reports and dashboards.
• 6. Performs or assists with auditing and monitoring various activities pertaining to privacy, security, and compliance. Ensure these activities are performed in a timely and efficient manner.
• 7. Participate in the development of information privacy and security monitoring activities, collaborating with stakeholders as necessary to ensure coordinated and effective reviews. Assists PwC in the performance of internal audits, as needed.
• 8. Assist with the risk assessment and management process: Conduct and participant in risk assessment planning and implementation. Analyze issues using standardized risk methodology. Identify and communicate high risk areas and issues as appropriate.
• 9. Participate in the continuous quality improvement of BILH operations in partnership with leadership, including monitoring and improving Compliance customer service, compliance with regulations, and related electronic systems.
• 10. Identify weaknesses and deficiencies, and provide input to BILH leadership on how to enhance the quality and efficiency of the work performed.
• 11. Identify deficiencies and advise on how to achieve compliance with regulatory requirements in an efficient manner.

Minimum Qualifications

Education: Bachelor's degree required.

Licensure, Certification & Registration: Professional certification is preferred, e.g. Certified Information Privacy Professional (CIPP), Certified Information Privacy Manager (CIPM), Certified in Healthcare Compliance (CHC), Certified HIPAA Professional (CHP).

Experience: Minimum 3 years related work experience required in information privacy or security, and healthcare compliance.

• Skills, Knowledge & Abilities: Must have specific HIPAA and HITECH knowledge and experience.
• Fluency in federal and state laws, regulations, and guidance related to information privacy and security.
• Demonstrated leadership and formal/informal influence skills.
• Ability to effectively work both independently and in a team environment.
• Exceptional organizational abilities, oral and written communication skills, and interpersonal skills.
• Ability to operate and communicate effectively while meeting multiple deadlines and completing projects simultaneously.
• Ability to interact in a positive, productive manner with staff, faculty, leadership, patients, vendors, and others (demonstrating sensitivity, tact, and professionalism).
• Good judgment and creative/original thinking to address evolving requirements related to healthcare compliance and information privacy and security.
• Advanced skills with Microsoft applications which may include Outlook, Word, Excel, PowerPoint or Access and other web-based applications.
• May produce complex documents, perform analysis and maintain databases.

Pay Range: $80,000.00 USD - $110,000.00 USD

The pay range listed for this position is the annual base salary range the organization reasonably and in good faith expects to pay for this position at this time. Actual compensation is determined based on several factors, that may include seniority, education, training, relevant experience, relevant certifications, geography of work location, job responsibilities, or other applicable factors permissible by law.

As a health care organization, we have a responsibility to do everything in our power to care for and protect our patients, our colleagues and our communities. Beth Israel Lahey Health requires that all staff be vaccinated against influenza (flu) as a condition of employment.

More than 35,000 people working together. Nurses, doctors, technicians, therapists, researchers, teachers and more, making a difference in patients' lives. Your skill and compassion can make us even stronger.

Equal Opportunity Employer/Veterans/Disabled