Job Description

Purpose & Scope:

The Privacy Officer serves as the subject matter expert on laws, regulations, policies, and procedures relating to the protection of private and confidential information. Working under the direction of the Vice President Chief Compliance Officer, the Privacy Officer manages the Privacy Program, including but not limited to, development, implementation and maintenance of Privacy policies and procedures, investigation and tracking of privacy incidents and reporting inappropriate access and/or disclosure of protected health information according to the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule, Health Information Technology for Economic and Clinical Health Act (HITECH) and applicable state/federal laws,.

The Privacy Officer also plans, coordinates, manages, and conducts privacy risk assessments and independent legal-compliance reviews to evaluate compliance with all applicable state and/or federal regulations and Virginia Hospital Center's privacy policies.

Education:

Juris Doctor (JD) or a master's degree in a related field is required.

Experience:

Five years of experience in healthcare compliance, privacy role, or equivalent experience is required.

Five years of experience in compliance and privacy regulations is required,

Proficiency using Microsoft Office Suite is required.

Experience with Fair Warning Audit Software is preferred.

Experience with electronic medical records software is required.

Experience with Epic applications is preferred.

Certification/Licensure:

Certified HIPAA Professional (CHP) or Certification in Healthcare Privacy Compliance (CHPC) to be obtained within 24 months.

Other Qualifications

• Relevant compliance professional certification from national association is preferred
• Demonstrated experience with state and/or federal privacy regulations (such as HIPAA or HITECH) impacting healthcare systems.
• Highly developed written and verbal communication skills; professional, collaborative approach that is solution oriented; demonstrated leadership and management skills including the ability to escalate concerns through appropriate chains of command; sound business judgment on handling sensitive and confidential information.