Privacy Officer

The Privacy Officer is responsible for leading and overseeing the organization’s Privacy Program, ensuring compliance with HIPAA, HITECH, 42 CFR Part 2, and other applicable state and federal regulations. This role manages privacy risk, breach response, and regulatory reporting while promoting a culture of confidentiality and compliance. 

POSITION SPECIFIC DUTIES & RESPONSIBILITIES:    

• Develop, implement, and lead the Privacy Program and maintain Privacy-related policies and procedures.
• Facilitate the investigation of privacy incidents and manage breach notifications.
• Conduct risk assessments and audits to evaluate the effectiveness of the Privacy Program, identify areas of improvement, and ensure compliance with both internal policies and procedures and state and federal regulations.
• Analyze metrics and identify trends to help drive continuous improvement in the Privacy Program.
• Develop, implement, and lead Privacy-related training initiatives in collaboration with internal departments and track Staff compliance.
• Manage regulatory reporting and ensure audit readiness.
• Oversee Client Rights and Privacy Practices 
• Mature processes and serve as privacy subject matter expert on cross-functional governance committees.
• Collaborate with Compliance, IT, HR, Legal, Training, and Operations.  

QUALIFICATIONS

education:

• Bachelor's Degree in related field is required
• Master's degree preferred

EXPERIENCE:

3 + years of healthcare, healthcare privacy or compliance experience.

PERFORMANCE COMPETENCIES: 

• Communication
• Decision Making
• Engagement
• Initiative and Accountability
• Interpersonal
• Learning
• Organizational Alignment
• Quality of Work

KNOWLEDGE/SKILLS/ABILITIES:

• Strong knowledge of HIPAA, HITECH, OCR, and 42 CFR Part 2. 
• Knowledge of investigative procedures, internal audit processes, evidence handling, documentation standards, and root-cause analysis. 
• Technical proficiency in relevant reporting systems, Microsoft Excel, data analysis tools, and policy management frameworks.
• Ability to partner with Legal, HR, Security, Operations, Compliance, and other internal departments to ensure organizational and regulatory alignment.  

CERTIFICATIONS/LICENSES:

• Certified in Healthcare Compliance (CHC) or other relevant health compliance certifications (e.g., Certified in Healthcare Privacy Compliance - CHPC) preferred.

OTHER INFORMATION

SAFETY SENSITIVE JOB CLASSIFICATION:

This job is classified as a “safety-sensitive” position as defined by the Oklahoma Medical Marijuana and Patient Protection Act.  Due to the “safety-sensitive” classification, an employee in this position would be subject to drug and alcohol testing, including random testing.  Marijuana is one of the substances included in the drug panel screening.  Possession of a medical marijuana license will not excuse you from the testing process or the consequences of testing positive for marijuana per the Family & Children’s Services Drug Free Workplace Policy, including possible revocation of a job offer or dismissal from employment.