Senior Compliance Coordinator - Privacy
University of IowaThe Senior Compliance Coordinator implements and maintains the University of Iowa Health Care HIPAA Privacy Program. The position will help ensure that UI Health Care employees understand and abide by the UI Health Care HIPAA Privacy policies.
This position is eligible for hybrid work within Iowa and will require a work arrangement form to be completed upon the start of your employment. Per policy, work arrangements will be reviewed annually, and must comply with the remote work program and related policies and employee travel policy when working at a remote location.
Position Responsibilities:
Investigation, Remediation and Reporting of Complaints and Reviews
Leads investigation and incident management activities. Conducts audits and testing, and supports the implementation, optimization, and ongoing maintenance of auditing software and system interfaces.
Collaborate with management staff, human resource, other privacy and information security team members, and leadership to assure compliance with federal and state privacy and security regulations including HIPAA, HITECH, and the organizations privacy and information security policies and procedures.
Perform initial review of incidents to determine if further investigations is warranted. These may come from flagged EMR accesses from privacy monitoring software, calls/emails to compliance helpline, risk management reports, and others in the organization.
When potential HIPAA violation is discovered, work with HR and supervisor to conduct interviews and assess if there has been a violation.
For confirmed HIPAA violations perform breach analysis, recommend potential mitigation including reeducation, implementation of process changes, and HR actions. Collect documentation of mitigation performed.
Negotiate and manage HIPAA required business associate agreements across all of the UI hybrid entity that includes the clinical components outside UI Health Care using parameters from legal services and consulting with legal as needed.
Track and follow up with key individuals to ensure all Clinical Systematic Analysis action items are completed.
When an investigation results in a breach, prepare notifications to patient and Office of Civil Rights.
Document the key interviews, mitigation and decisions in an incident summary.
Consultation, Risk Assessment and Interpretation/Research of Regulations
Answer compliance hotline calls to answer questions, initiate investigations and escalate issues as necessary.
Respond to HIPAA and general compliance inquiries where interpretation may be required.
As part of the formal workflow for external data sharing, review requests and gather clarifying details from requestor and others as needed.
Review and respond to patient and employee complaints and concerns regarding privacy practices
.Track and analyze logged compliance issues to identify trends
.At the direction of the Associate Director, conduct reporting on behalf of the institution to relevant state and federal entities regarding instances of regulatory non-compliance.
Act as a HIPAA liaison for the University of Iowa Center for Advancement, conduct UICA HIPAA trainings, conduct quarterly UICA audits in conjunction with Health Care Information Systems team.
Management of External Standards Review Process
Conducts routine reporting on behalf of the institution to relevant state and federal entities regarding instances of regulatory non-compliance.
Policy Development
Review departmental workflows, provide recommendations, and ensure processes align with HIPAA Privacy policy requirements and continuous improvement efforts.
Participate in writing and amending HIPAA Privacy policies and procedures.
Training and Educational Programs
Create and deliver training content related to HIPAA Privacy and UI Health Care Compliance program.
Identify and make recommendations for training and education needs across UI Health Care.
Develop handouts, frequently asked questions, and customize training programs in response to privacy trends.
Human Resource
Provides functional supervision to student employees.
Assist with hiring of new staff in the department at the direction of the Associate Director.
Assist with developing and implementing orientation and training of new staff.
Required
A Bachelor’s degree in Business Administration, or related field, or an equivalent combination of education and experience is required.
-
3 years of related experience
Demonstrated proficiency using MS Word, PowerPoint and Excel, including the ability to format tables, retrieve data viz queries and create presentations.
Excellent written, verbal and interpersonal communication skills
Proficiency in public speaking
Experience developing training and education materials
Excellent organizational skills required.
Flexible, with the ability to change priorities quickly and the capacity to handle multiple tasks simultaneously.
Proven analytic, problem solving and organizational skills. Ability to work independently.
Demonstrated experience working effectively in a welcoming and respectful workplace environment.
Desired
Master’s degree in related field
Knowledge of laws related to HIPAA Privacy Act.
Knowledge of University of Iowa Health Care policies and procedures.
Experience in project management, quality improvement or regulatory compliance.
Experience with Electronic Medical Records
Application Process: To be considered, applicants must upload a cover letter and resume (under the submission of relevant materials) that clearly address how they meet the listed required and desired qualifications of this position. Job openings are posted for a minimum of 7 calendar days. Successful candidates will be required to self-disclose any conviction history and will be subject to a criminal background check and credential/education verification.
Up to 5 professional references will be requested at a later step in the recruitment process. For questions, contact Sharon Walther at sharon-walther@uiowa.edu.
This position is not eligible for University sponsorship for employment authorization now or in the future.