Privacy Compliance Specialist

Weill Cornell Medical College•New York, NY

About The Position

Responsible for privacy unit incident timely response tracking, logging, and record keeping. Serves as the tri-partite incident monitor for incidents identified through the tri-partite monitoring system. This role reviews incidents for false positives and conducts preliminary investigations for alleged violations. Incumbent gathers facts and documents investigation steps and information for incident determination. This role is also responsible for research related privacy incidents and serves as the Data Privacy Review Board investigator.

Requirements

Bachelor's Degree
Approximately 2 years of prior related work experience.
Detail oriented with strong organizational and time management skill with the ability to prioritize and manage the completion of multiple tasks/projects.
Strong computer skills (Microsoft Office including Word, Excel, and PowerPoint) and Adobe Acrobat.
Strong writing skills.

Responsibilities

Monitors incident monitoring system for WCM incidents. Identifies false positives and documents trends.
Conducts preliminary investigation for alleged incidents; gathers facts, documents investigation steps and writes summaries for incident determination.
May track privacy training activities and prepare reports of training and training delinquencies utilizing various electronic databases.
May provide on-going support for new employee and supervisor privacy training and track to ensure that all privacy-related training and meetings are documented.
Responsible for the development and implementation of privacy workshops, lectures, and meeting materials.
Assists with non-HIPAA incident investigations, policy development and training (GDPR, ACA, FERPA, and NYS).
Logs and tracks privacy incidents, calls and emails in WCM's incident management system; updates incidents in real-time and closes incidents timely. Escalates bottlenecks and high-risk incidents in accordance to established workflows.
Manages IT/Security related privacy incidents, including but not limited to, lost devices, phi access, Service Now entered privacy incidents, and DLP incidents.
Under direction of privacy leadership team, prepares and sends out privacy related correspondence.
Reviews privacy policies for accuracy and makes recommendations for updates. Keeps privacy policies updated on website. Manages privacy policy communication program.
Reviews and assists with management of accounting of disclosures.
Prepares privacy related weekly and monthly metrics for leadership.
Reviews and manages Care Everywhere access logs.
Performs other related duties as assigned.