Manager Privacy Office

Health Care Service Corporation•Chicago, IL

11d•$92,700 - $167,500•Hybrid

About The Position

This position is responsible for day-to-day management of team that is responsible for analyzing, drafting, and negotiating various agreements that the HCSC Privacy Office is asked to opine to ensure HCSC is compliant with various federal and state privacy regulations. This position both manages those responsible for supporting key privacy initiatives and projects and is often responsible for driving key privacy initiatives. This position is expected to analyze the applicable privacy laws, rules, and regulations including HIPAA, and assess the impact on HCSC operations and processes as well as guide and train others to do the same. This position will collaborate with other members of the HCSC Privacy Office and stakeholders across the organization to resolve complex privacy matters. This position manages those who act as the privacy subject matter expert for HCSC when negotiating with customers, vendors, and other third parties, and will be required to act as the privacy subject matter expert for higher priority agreements. Additionally, this position requires an understanding of the management of privacy and security incidents and investigations with mitigation and correct actions; daily management of wholly owned subsidiary privacy compliance including development and oversight of operational privacy policies and procedures, and breach notification and digital privacy and may be required to provide support in these areas.

Requirements

Bachelor’s Degree and 6 years’ experience in healthcare, legal, privacy, or contracting; OR JD or MBA and 4 years of experience or equivalent degree; OR 10 years of relevant experience.
2 years of direct supervision experience.
Knowledge and experience interpreting state/federal laws.
Experience with health care industry regulations.
PC proficiency to include Word, Excel, Access, and PowerPoint.
Ability to work with highly sensitive and confidential information.
Strong verbal and written communication skills, including interpersonal skills to work with peers or across departments to resolve issues or complete projects/initiatives.
Excellent facilitation, organizational, integration and presentations skills.

Nice To Haves

Knowledge of managing health care privacy breaches and incidents.
Knowledge of RadarFirst or similar compliance software experience.
Six sigma black belt certification or similar certification for process improvement.
HIPAA, Privacy, or Compliance certifications, such as CHP, CHC, CHPC, CIPP, PMP, LSS, etc.

Responsibilities

Day-to-day management of team that analyzes, drafts, and negotiates various agreements.
Ensuring HCSC is compliant with various federal and state privacy regulations.
Managing those responsible for supporting key privacy initiatives and projects.
Driving key privacy initiatives.
Analyzing applicable privacy laws, rules, and regulations including HIPAA.
Assessing the impact of privacy laws on HCSC operations and processes.
Guiding and training others to analyze privacy laws and assess impact.
Collaborating with other members of the HCSC Privacy Office and stakeholders to resolve complex privacy matters.
Managing those who act as the privacy subject matter expert for HCSC when negotiating with customers, vendors, and other third parties.
Acting as the privacy subject matter expert for higher priority agreements.
Understanding the management of privacy and security incidents and investigations with mitigation and correct actions.
Daily management of wholly owned subsidiary privacy compliance.
Development and oversight of operational privacy policies and procedures.
Managing breach notification and digital privacy.
Providing support in privacy and security incident management, breach notification, and digital privacy areas.