Manager Privacy Office

HCSC•Chicago, IL

12h•Hybrid

About The Position

This position is responsible for day-to-day management of a team that analyzes, drafts, and negotiates various agreements for the HCSC Privacy Office to ensure compliance with federal and state privacy regulations. This position manages those responsible for supporting key privacy initiatives and projects and often drives key privacy initiatives. The role involves analyzing applicable privacy laws, rules, and regulations, including HIPAA, assessing their impact on HCSC operations and processes, and guiding others to do the same. Collaboration with other members of the HCSC Privacy Office and stakeholders across the organization is expected to resolve complex privacy matters. This position manages individuals who act as the privacy subject matter expert for HCSC when negotiating with customers, vendors, and other third parties, and will be required to act as the privacy subject matter expert for higher priority agreements. Additionally, this position requires an understanding of managing privacy and security incidents and investigations, including mitigation and corrective actions; daily management of wholly owned subsidiary privacy compliance, including development and oversight of operational privacy policies and procedures, and breach notification and digital privacy; and may require support in these areas.

Requirements

Bachelor’s Degree and 6 years’ experience in healthcare, legal, privacy, or contracting; OR JD or MBA and 4 years of experience or equivalent degree; OR 10 years of relevant experience.
2 years of direct supervision experience.
Knowledge and experience interpreting state/federal laws.
Experience with health care industry regulations.
PC proficiency to include Word, Excel, Access, and PowerPoint.
Ability to work with highly sensitive and confidential information.
Strong verbal and written communication skills, including interpersonal skills to work with peers or across departments to resolve issues or complete projects/initiatives.
Excellent facilitation, organizational, integration and presentations skills.

Nice To Haves

Knowledge of managing health care privacy breaches and incidents.
Knowledge of RadarFirst or similar compliance software experience.
Six sigma black belt certification or similar certification for process improvement.
HIPAA, Privacy, or Compliance certifications, such as CHP, CHC, CHPC, CIPP, PMP, LSS, etc.

Responsibilities

Day-to-day management of a team responsible for analyzing, drafting, and negotiating various agreements.
Ensuring HCSC is compliant with various federal and state privacy regulations.
Managing individuals responsible for supporting key privacy initiatives and projects.
Driving key privacy initiatives.
Analyzing applicable privacy laws, rules, and regulations, including HIPAA.
Assessing the impact of privacy regulations on HCSC operations and processes.
Guiding and training others to analyze and assess privacy regulations.
Collaborating with other members of the HCSC Privacy Office and stakeholders to resolve complex privacy matters.
Managing individuals who act as the privacy subject matter expert for HCSC when negotiating with customers, vendors, and other third parties.
Acting as the privacy subject matter expert for higher priority agreements.
Understanding the management of privacy and security incidents and investigations with mitigation and correct actions.
Daily management of wholly owned subsidiary privacy compliance.
Development and oversight of operational privacy policies and procedures.
Managing breach notification and digital privacy.
Providing support in privacy and security incident management, breach notification, and digital privacy areas.