Compliance and Privacy Specialist at Beth Israel… · Boston

Summary: Beth Israel Lahey Health is a growing healthcare organization dedicated to making a difference in people’s lives. The Compliance and Privacy Specialist will support compliance with regulations and guidelines pertaining to information privacy and security, working with various stakeholders to ensure effective training, policy development, and monitoring of compliance activities.

Responsibilities:
- Assist with scheduling, conducting and coordinating investigations; Track and document incoming inquiries, concerns, and other matters; Assist with drafting and updating, and formatting policies / procedures / guidance in a clear, concise manner that reflects current requirements; Coordinate training and communication programs and serve as an resource for information privacy and security compliance, as well as general compliance inquiries / issues / projects
- Use knowledge of federal, state, local, regulations and guidance, Code of Conduct, investigatory best practices, confidentiality, and policies and procedures to effectively work with organizational partners throughout the investigatory process, supporting investigations as applicable
- Conduct ongoing review of policies and procedures, working with leadership to ensure correction and education, as necessary. Ensure that local, state, and federal regulations and guidelines are correctly applied and appropriately described in policies, procedures, and guidance. Draft, update, and maintain policies and procedures in partnership with BILH leadership and organizational partners as needed
- Training, communication, and advisory services: Work with BILH leadership to identify, coordinate, and implement continuous training and communication to the BILH community, enhancing workforce awareness
- Serves as a subject matter resource/consultant on patient privacy and information security issues to all areas and all levels of the BILH community. May serve on organizational committees related to patient privacy and information security, and general compliance matters
- Anticipate reporting requirements and participate in the development of materials and updates for Integrity and Compliance and BILH leadership. Perform data analysis. Identify trends. Prepare visual graphics and written materials to support findings. Develop reports and dashboards
- Performs or assists with auditing and monitoring various activities pertaining to privacy, security, and compliance. Ensure these activities are performed and documented in a timely and efficient manner
- Participate in the development of patient privacy and information security monitoring activities, collaborating with stakeholders as necessary to ensure coordinated and effective reviews. Assists outsourced Internal Auditor in the performance of internal audits, as needed
- Assist with the risk assessment and management process: Conduct and participate in risk assessment planning and implementation. Analyze issues using standardized risk methodology. Identify and communicate high risk areas and issues as appropriate
- Participate in the continuous quality improvement of BILH operations in partnership with leadership, including monitoring and improving Compliance customer service, compliance with regulations, and related electronic systems
- Identify weaknesses and deficiencies and provide input to BILH leadership on how to enhance the quality and efficiency of the work performed
- Identify deficiencies and advise on how to achieve compliance with regulatory requirements in an efficient manner

Required Qualifications:
- Bachelor's degree is required
- 0-3 years related work experience required in patient privacy or information security, and healthcare compliance
- Must have general HIPAA and HITECH knowledge and experience
- Fluency in federal and state laws, regulations, and guidance related to information privacy and security
- Demonstrated professionalism and formal/informal influence skills
- Ability to effectively work both independently and in a team environment
- Must have organizational abilities, oral and written communication skills, and interpersonal skills
- Ability to operate and communicate effectively while meeting multiple deadlines and completing projects simultaneously
- Ability to interact in a positive, productive manner with staff, faculty, leadership, patients, vendors, and others (demonstrating sensitivity, tact, and professionalism)
- Good judgment and creative/original thinking to address evolving requirements related to healthcare compliance and information privacy and security
- Advanced skills with Microsoft applications which may include Outlook, Word, Excel, PowerPoint or Access, and other web based applications

Preferred Qualifications:
- Professional certification is preferred, e.g., Certified Information Privacy Professional (CIPP), Certified Information Privacy Manager (CIPM), Certified in Healthcare Compliance (CHC), Certified HIPAA Professional (CHP)

Required Skills: HIPAA, HITECH, Certified Information Privacy Professional (CIPP), Certified Information Privacy Manager (CIPM), Certified in Healthcare Compliance (CHC), Certified HIPAA Professional (CHP), Patient privacy, Information security, Healthcare compliance, Investigatory best practices, Policy and procedure drafting and updating, Data analysis, Microsoft Outlook, Microsoft Word, Microsoft Excel, Microsoft PowerPoint, Microsoft Access