Director of Privacy & Vendor Oversight

Viva Health•Birmingham, AL

34d

About The Position

The Director of Privacy and Vendor Oversight assists the Executive Director in supervising the Privacy & Vendor Oversight Department. This position provides ownership of the organization’s contract management system, ensuring contracts are centrally maintained, accessible, and reliably tracked to support business operations and internal controls. The role is responsible for maintaining Health Insurance Portability and Accountability Act (HIPAA) privacy policies, procedures and practices that govern the privacy of, and access to, protected health information (PHI) in accordance with the HIPAA. This position conducts regulatory and business reviews of Business Associate Agreements (BAAs) and coordinates with Legal Counsel, who performs legal review and provides legal approval. This individual leads the development of request for proposals (RFPs) for the evaluation of new vendors and ensures the department performs proper oversight of vendors classified as First Tier, Downstream, and Related Entities (FDRs). Additionally, this role supports the Pharmacy Department in reviewing agreements with Pharmacy Benefit Managers.

Requirements

Bachelor’s Degree
10 or more years’ experience working in health care related businesses
5 years’ experience in a managerial or supervisory role
5 years’ experience with HIPAA privacy requirements
Critical thinking skills, problem solving skills, and strong attention to detail
Ability to work cooperatively with regulators, leaders, and Business Owners in other departments
Ability to manage employees effectively
Ability to research vendor offerings, review vendor proposals, and effectively manage vendor performance
Excellent verbal and written communication skills including the ability to prepare reports, policies, training material, etc.
Ability to research and interpret applicable laws and regulations and apply them to different processes and departments during internal and subcontractor audits
Ability to analyze data and identify trends and/or anomalies
Ability to interpret, summarize, and relay large amounts of detailed information to regulators, customers, and management
Proficient in Microsoft Word, Excel and PowerPoint

Nice To Haves

Juris Doctor
Experience issuing Requests for Proposals
Experience reviewing business and regulatory terms for Pharmacy Benefit Manager services
Experience managing a contract database
Served as a Privacy Officer

Responsibilities

Convert and migrate existing contracts into a centralized contract management database/system, ensuring accuracy, completeness, and proper indexing.
Ensure contract records, including amendments, renewals, expirations, and related documentation are maintained and updated.
Establish, document, and enforce contract management policies and procedures and documentation standards.
Ensure the ongoing integrity, organization, and usability of the contract management system and serve as the primary point of contact for contract documentation and system-related inquiries.
Ensure the department follows established processes for receiving, documenting, tracking, investigating, and acting on privacy incidents and complaints.
In conjunction with the Privacy Officer, ensure timely regulatory reporting and breach notification of HIPAA incidents rising to the level of a HIPAA breach.
Take appropriate steps to document and mitigate privacy breaches.
Develop, direct, and ensure delivery of privacy training and privacy awareness to all employees, contractors, business associates, and other third parties as appropriate including the selection and training of HIPAA point persons in each department and development and dissemination of education materials such as one-point lessons regarding privacy.
Ensure the organization’s BAAs comply with current regulatory requirements and that the organization maintains fully executed and compliant BAAs with all business associates.
Supervise Departmental employee(s) whose primary function is vendor oversight.