Privacy Associate (Privacy Compliance Specialist, Sr)
HybridPortland, Oregon, United States
Job Summary
Respond to privacy inquiries and provide expert guidance on HIPAA, FERPA, and GDPR regulations across healthcare, academic, and research missions. Conduct facility reviews, risk assessments, and onsite evaluations of physical safeguards and PHI handling practices. Develop mitigation strategies for identified privacy risks and assist leadership in improving policies and processes. Deliver training and outreach activities aligned with the Privacy program's plan while representing the office on internal and external assignments. Manage assigned projects to ensure timely, high-quality completion and evaluate business practices for risk reduction.
Required Qualifications
- Bachelor's Degree in a related field
- 6 years of combined experience in healthcare privacy or compliance with at least 4 years in information privacy and security
- Certification in compliance-related field or ability to obtain certification with 12 months
- Experience working with highly sensitive and confidential information and projects
- Excellent organizational skills and ability to operate and communicate effectively while meeting multiple deadlines and completing projects simultaneously
- Ability to analyze information and construct an action plan tailored to resolve issues effectively and cooperatively
- Experience reviewing, interpreting, and providing guidance on regulatory rules and standards
- Ability to read and comprehend complex terminology and procedures in order to provide thorough and accurate guidance and assessments
- Knowledge of compliance, federal and state laws, regulations, and guidance related to information privacy and security and HIPAA compliance
- Ability to analyze and communicate complicated regulations and requirements to individuals at all levels of the organization
- Ability to chart a course of action that effectively and efficiently assists the organization and department in fulfilling goals and objectives
- Proven knowledge of formal information security and privacy standards, techniques and methodologies
- Experience with Epic and/or other clinical applications
- Ability to collaborate effectively and work both independently and in a team environment
- Exceptional verbal and written communication skills
- Exceptional people skills. Ability to interact in a positive, productive manner with others (demonstrating sensitivity, tact and professionalism)
- Ability to deal effectively with difficult situations
- Highly motivated, team oriented, professional and trustworthy with strong skills is personal diplomacy
- Primarily remote, hybrid work environment; regular work hours to be coordinated with manager
- Travel to meetings throughout OHSU on an as needed basis
Desired Qualifications
- Advanced Degree (J.D. or MHA) or specific or additional training in information privacy and security
- Prior experience in an academic medical center setting
- Advanced proficiency with EHR systems and software
- CIPP/US
- CHPC
- CHC
- CISSP
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.