HIPAA Privacy and Security Director

Exec VP & VP Academic Affairs
Hybrid - Work Model
Posting Category:

The HIPAA (Health Insurance Portability and Accountability Act) Privacy and Security Director oversees all ongoing activities related to the development, implementation, maintenance of, and adherence to the organization's policies and procedures covering the privacy of, and access to, patient health information (PHI) in compliance with federal and state laws and the U of I HIPAA Privacy and Security Directive. This role will support the organization in managing its HIPAA privacy and security risk, while advancing healthcare to improve the health of our patients and communities, promote health equity and develop the next generations of healthcare leaders.

Additional responsibilities include:

• Evaluate the organization's existing policies and procedures for HIPAA compliance by performing HIPAA risk assessments.
• Develop and execute HIPAA privacy and security strategy.
• Administer a process for receiving, documenting, tracking, investigating, and taking action on all HIPAA breaches or complaints concerning the University's HIPAA privacy and security policies and procedures in coordination and collaboration with other similar functions, and when necessary, University Counsel.
• Collaborate with faculty, staff, researchers, administration, legal counsel, and compliance to identify and address privacy and security policies and procedures that require improvement.
• Develop and oversee implementation of new and updated policies and procedures to manage HIPAA privacy and security risk, while enabling efficient operations and innovative research.
• Manage HIPAA privacy and security staff.
• Lead the organization's health information HIPAA privacy and security committee and represent HIPAA privacy and security on committees.
• Develop and manage HIPAA privacy and security budget.
• Assess methods and procedures used to store and transmit PHI; identify security or other compliance risks, and research and recommend improvements.
• Oversee the evaluation and selection of content and delivery strategy of HIPAA training program.
• Initiate, facilitate, and promote activities to foster information privacy and security awareness within the covered entity.
• Monitor and report on compliance with the HIPAA privacy and security directive.
• Participate in the development, implementation, and ongoing compliance monitoring of all business associate agreements.
• Cooperate with the HHS Office of Civil Rights, other legal entities, and University officers in any HIPAA related compliance reviews or investigations.
• Make or facilitate appropriate disciplinary steps and sanctions as needed when any member of the workforce fails to comply with HIPAA privacy and security policies.
• Serve as the internal subject matter expert on HIPAA, maintain current knowledge of HIPAA laws and regulations, and any other applicable federal and state privacy laws or regulations.
• Report on changes in applicable laws and regulations related to healthcare and provide training as needed.
• Perform other related duties as assigned.

#LI-JM1

• Bachelor's degree from an accredited college/university in discipline to be managed, or equivalent work experience.
• Minimum of 5 years of experience leading substantive aspects of a privacy and/or security program at a hospital or university with a hospital (e.g., Privacy Officer, Director, Manager, Team Lead).

• Strong analytic and problem-solving capabilities and the ability to identify solutions and recommendations that effectively address business and control needs along with how to train and guide others in this area.
• Ability to develop and maintain collaborative relationships with a variety of people and teams, from technical subject matter experts to senior executives.
• Proven record of achieving objectives through collaborative leadership.
• Experience interacting with regulators regarding statutory/regulatory requirements, compliance issues/risks, and regulatory audits.
• Understanding of HIPAA's regulations, requirements, and guidelines.
• Understanding of related information privacy laws and regulations including those governing access, release of information, and security technologies.
• Professional communication skills and the ability to effectively communicate complex information clearly and thoroughly with all levels of the organization.
• Excellent organizational skills and attention to detail.

Application Procedures & Deadline Information
For full consideration, candidates must apply and submit a letter of application, resume, and names/addresses/phone numbers of three professional references by 6 pm on 5/9/2023 or visit https://www.hr.uillinois.edu/employment.

System Human Resource Services
(217) 333-2600
erhr@uillinois.edu

The University of Illinois System is an equal opportunity employer, including but not limited to disability and/or veteran status, and complies with all applicable state and federal employment mandates. Please visit Required Employment Notices and Posters to view our non-discrimination statement and find additional information about required background checks, sexual harassment/misconduct disclosures, and employment eligibility review through E-Verify.

Applicants with disabilities are encouraged to apply and may request a reasonable accommodation under the Americans with Disabilities Act (2008) to complete the application and/or interview process. Requests may be submitted through the reasonable accommodations portal, or by contacting the System Human Resource Services, Diversity, Equity and Inclusion at 217-333-2600, or by emailing erhr@uillinois.edu.

Requisition ID: 9000486
Job Category: Academic Professional
Campus Location: Urbana