Manager, Privacy Compliance

ArchWell Health is a new, innovative healthcare provider devoted to improving the lives of our senior members. We deliver best-in-class care at comfortable, accessible neighborhood clinics where seniors can feel at home and become part of a vibrant, wellness-focused community. Our members experience greater continuity of care, as well as the comfort of knowing they will be treated with respect by people who genuinely care about them, their families, and their communities. 

Job Summary:

The Privacy Compliance Manager role at ArchWell Health is a unique opportunity to build a new privacy compliance function from the ground up in a fast-growing healthcare startup environment. This role will involve interfacing with our business teams, clinical staff, leadership, legal counsel, and vendors to develop and execute a wide range of privacy compliance initiatives that require creative and proactive guidance, implementation, maintenance, and monitoring.

The Privacy Compliance Manager will help build, maintain, operate, and oversee the overall structure and day-to-day management of the privacy compliance program according to HIPAA and other applicable state and federal regulations. The role will include, but is not limited to, the development, implementation, maintenance, and monitoring of privacy policies and standards, development and delivery of privacy training, advising the business on privacy practices and processes, and investigating, tracking, and reporting privacy incidents 

The Privacy Compliance Manager will ensure the organization maintains safeguards (e.g., administrative, technical, and physical) to protect Protected Health Information (PHI) in collaboration with the Information Security team. The Privacy Compliance Manager will also monitor organizational privacy compliance and processes (e.g., consents and notices) and ensure that ArchWell Health meets the expectations of our health plan partners.

The Privacy Compliance Manager will manage all requests from patients who wish to exercise their rights according to applicable state and federal regulations. They will also oversee and manage the processes for release of information according to applicable state and federal regulations. Additionally, the Privacy Compliance Manager will address all privacy-related issues, complaints, and compliance-related correspondence.

The ideal candidate will have a strong background in healthcare privacy compliance, function well with a high degree of autonomy, and be able to lead the privacy compliance program while collaborating with other departments to manage overall compliance efforts at a fast-growing company.

You should apply for this job if you are:

• Excited about Healthcare privacy compliance. From staying on top of emerging trends and regulatory changes, to developing processes and solving problems as they arise, you’re in your element in keeping organizations compliant with their obligations to safeguard PHI and follow applicable federal and state privacy requirements and regulations.
• Flexible & adaptable. You enjoy change, a fast-paced environment, and solving a wide-variety of problems week in and week out.
• Detail oriented. You sweat the details when it counts, and know how to prioritize tasks appropriately.
• A strong communicator. You’re well-practiced in effectively communicating both verbally and in writing with your colleagues, leadership, and government agencies.
• Strong regulatory/risk and business judgment. You have the ability to assess situations and questions quickly, often without perfect information, and understand the relative importance of various decisions.

Duties/Responsibilities:

• Provides expertise by assisting in the build, maintenance, operation, and oversight of the privacy compliance program, policies, and standards.
• Maintains understanding of compliance and privacy state and federal regulations, and develops, maintains and implements privacy policies and standards, and other organizational guidelines.
• Develops capabilities to manage privacy risk related to potential unauthorized Processing of Personal Information and safeguard PHI. Assists management with designing and developing business process to ensure compliance with regulations and company standards.
• Responds to employee inquiries regarding appropriate uses and disclosures of PHI and monitors the application of privacy policies and standard requirements.
• Investigates, tracks, and addresses actual, perceived, or potential privacy incidents, issues, complaints, or disputes related to privacy. Coordinates efforts with Information Security and other business units.
• Developing, managing, and implementing privacy training(s) to all Workforce Members.
• Creates reports and highlights status of privacy compliance activities across the organization.
• Manages programs, policies, and procedures to ensure compliance with CMS and Medicare programs.
• Collaborates with leadership across the organization in ensuring compliance with HIPAA and other privacy-related regulations.
• Interfaces and maintains positive relationships with counterparts at ArchWell Health's health plan partners.

Required Skills/Abilities:

• Bachelor's Degree with 5-7 years of relevant work experience.
• Experience working in a healthcare privacy compliance role for a multi-state/multi-site provider, and deep knowledge of HIPAA.
• Strong analytical skills.
• Demonstrated ability to build a compliance function and lead ongoing compliance activities.
• Strong project management, problem solving, and organizational skills.
• Excellent communicator, both internally and externally, and able to work with leaders at all levels.

Preferred:

• Certified Information Privacy Professional (CIPP)
• Certified Information Privacy Manager (CIPM)
• Certified Information Privacy Technologist (CIPT)