Administrative Program Manager I

State of Maryland•Baltimore City, MD

3d•Onsite

About The Position

MHBE is accepting applications for an Administrative Program Manager I/Compliance and Privacy Manager. The Maryland Health Benefit Exchange is responsible for the administration of Maryland Health Connection, the State's health insurance marketplace, under the Patient Protection and Affordable Care Act of 2010 (ACA). MHBE works with the Maryland Department of Health, Maryland Insurance Administration, Department of Human Services, and stakeholders statewide. Our Vision: High-quality, affordable health coverage for all Marylanders. Mission Statement: We improve the health and well-being of Marylanders by connecting them with high-quality, affordable health coverage through innovation, technology, and customer service. Values: Diverse & Inclusive, Innovative, Collaborative, Ethical GRADE 19 LOCATION OF POSITION Baltimore City, Maryland Main Purpose of Job Under the direction of MHBE’s Director of Compliance and Privacy, the Compliance and Privacy Manager is responsible for assisting with the implementation and maintenance of all facets of MHBE’s Compliance and Privacy programs including, but are not limited to, auditing and monitoring activities (departmental and business partner assessments by MHBE and State and Federal assessments of MHBE); overseeing the review and update of agency-wide policies and procedures; recording, investigating and resolving Fraud, Waste and Abuse (FWA) concerns; overseeing the agency-wide record retention procedure; collaborating across departments in negotiating / finalizing Non-Exchange Entity Agreements (NEEAs), Data Use Agreements (DUAs) and Memorandum of Understandings (MOUs), and maintaining a repository for NEEAs and DUAs; leading and coordinating privacy incident reporting, investigations, mitigations, breach risk analysis and corrective actions; performing Privacy Impact Assessments and self-assessment of compliance with Acceptable Risk Controls for ACA, Medicaid and Partner Entities (ARC-AMPE); preparing requested reports related to Compliance and Privacy by collecting, analyzing and summarizing data obtained through investigations, work plan submissions and other activities; developing and updating the annual compliance and privacy training; maintaining current knowledge of applicable laws and regulations pertaining to Compliance and Privacy; maintaining timely communication with the Director of Compliance and Privacy on concerns that have been reported and/or observed; and maintaining effective communications with MHBE stakeholders (internally and externally) while consistently demonstrating a high standard of conduct, ethics and objectivity. The Compliance and Privacy Manager may also lead special projects assigned by the Director of Compliance and Privacy.

Requirements

Bachelor's degree in any discipline from an accredited college or university
2-5 years of verifiable experience in compliance (such as creating and updating policies & procedures and experience creating and managing work plans with a strong attention to detail)
Experience recording, investigating, tracking and resolving cases
Audit experience (such as coordinating, conducting, overseeing or supporting an audit)
2-5 years of verifiable experience in Data Privacy
One year of this experience must have involved one or more of the following: supervision, overseeing and coordinating the general operations of a unit, applying rules and regulations, or exercising responsibility for the development of tasks related to a privacy program such as policies or procedures.
Clear and concise articulation in verbal and written communications and active listening with messages tailored to the audience
Proficiency in Microsoft Office (Word, Excel, and PowerPoint)
Candidates may substitute U.S. Armed Forces military service experience as a commissioned or non commissioned officer involving staff work related to the administration of rules, regulations, policy, procedures and processes, or overseeing or coordinating unit operations or functioning as a staff assistant to a higher ranking commissioned officer on a year-for-year basis for the required education and experience.

Nice To Haves

A Masters Degree in healthcare or business administration or Juris of Doctor (JD).
Certification in Privacy or Healthcare Compliance (CIPP, CIPM, CIPT and/or related certifications a plus).
Demonstrated ability to engage with a high degree of self-direction in analyzing issues, developing plans to resolve the issues, and implementing the resolution
Must be able to manage multiple priorities and projects with tight deadlines
Experience with preparing technical and non-technical reports, presenting findings, conducting investigations, reviewing and analyzing documentation, and managing cases
Outstanding interactive and leadership skills, and the ability to function in a team environment
Strong understanding of federal, state, and local regulatory processes
Knowledge of current healthcare and ethics laws/regulations (e.g. The Patient Protection and Affordable Care Act (ACA), 45 CFR 155 Privacy and IT Security, 45 CFR 155 Exchange Establishment Standards, ARC-AMPE, Md. Code Ann., State Gov't §§ 15-101 - Ethics Law)
Experience in developing, implementing, monitoring and/or improving a Privacy Program such as: Developing data use agreements, Monitoring compliance with privacy regulations, Overseeing privacy incident management, Overseeing and coordinating the general operations of a unit, Applying rules and regulations, Exercising responsibility for the development of policies or procedures
2+ years of experience with data inventory documentation, privacy impact assessments, and data mapping

Responsibilities

Assist in the development and implementation of MHBE’s Compliance and Privacy programs by incorporating corrective actions and new requirements into Audit Control Plan, Privacy Program Plan and Privacy Notice.
Collaborate with the Director of Compliance and Privacy in conducting annual internal reviews of MHBE departments and assist with preparation, coordination and completion of external audits of MHBE as mandated by Centers for Consumer Information and Insurance Oversight (CCIIO), Centers for Medicaid and Medicare Services (CMS), the Internal Revenue Service, and the Maryland Office of Legislative Audits.
Collaborate with IT Security, and other departments, to complete the annual Privacy Impact Assessment (PIA) and Privacy Self-assessments.
Perform annual and ongoing Personally Identifiable Information Inventory assessments, in collaboration with IT Security, to ensure PII inventory is complete and maintained so as to minimize access to, use of, and disclosure of consumer PII (inputs and outputs) to only that amount which is required for individuals to complete their job functions, within and across the Exchange.
Assist with the development, distribution, implementation and tracking of privacy and compliance training materials, forms and documents, and assist departments across the agency for review, update, renewal and dissemination of departmental policies and procedures.
Actively lead and coordinate privacy incident reporting, investigations, risk mitigation, breach analyses, breach notifications, and corrective action plans for internal and external stakeholders, along with properly documenting records in the incident management system, keeping the logging current and reporting incident statistics as needed.
Prepare requested reports by collecting, analyzing and summarizing relevant information obtained through investigations, work plan submissions and other privacy and compliance activities.
Collaborate in the development, tracking and maintenance, as applicable, of all official records regarding due diligence and compliance for MHBE Non-Exchange Entities Agreements (NEEAs) / Data Use Agreements (DUAs) / Memorandum of Understanding (with focus on Compliance and Privacy requirements) with contractors, State agencies, and other entities to meet Medicaid, CHIP and other state and federal benefit programs and privacy compliance.
Coordinate with IT personnel in the design, development, and/or implementation of privacy requirements, checklists and/or tools to be used in new applications regarding uses or disclosures of personally identifiable information.
Lead, develop and coordinate implementation of Compliance and Privacy related corrective action plans ensuring proactive reviews of pending regulations and their integration into the Plans.
Be a resource for staff and management in compliance and privacy related matters through meetings, discussions, and formal training.
Maintain timely communication with the Director of Compliance and Privacy regarding compliance and privacy concerns that have been reported and/or observed.
Maintain current knowledge of applicable federal and state compliance and privacy laws and accreditation standards.
Effectively interact and communicate with MHBE stakeholders while consistently demonstrating a high standard of conduct, ethics, objectivity, judgment, independence and discretion.
Other duties as assigned.