Privacy Compliance Specialist (Remote)

American Specialty Health Incorporated

1d•$48,000 - $65,000•Remote

About The Position

American Specialty Health Incorporated is seeking a Privacy Compliance Specialist to join our Regulatory Strategic Development (RSD) department. This position will support the company’s compliance efforts with particular focus on supporting the functions of the company’s Privacy Office. Note: The individual in this position is not intended to practice law or provide legal advice. The position researches privacy issues and tracks legislative and regulatory developments affecting the company’s privacy operations and assists management, as directed, with ensuring compliance with the same. It also includes keeping the Privacy Officer and other senior management apprised of privacy matters that will impact the company.

Requirements

Bachelor’s degree in English, History, Political Science or equivalent; Master’s in Health Care Administration, Paralegal or Legal degree preferred or equivalent experience.
2-4 years’ experience with regulatory compliance in a health care/insurance benefit administration environment, with experience in regulatory compliance research, privacy regulations and federal regulatory issues involving HIPAA, GLBA, GINA preferred.
Experience with health insurance contracts and certificate forms and working with health plans and employer groups helpful.
Excellent research skills.
Strong and effective analytical and writing skills.
In-depth understanding of ASH systems, policies and procedures preferred.
Proficient in MS Office, including Word and Excel; strong computer skills preferred; experience with Westlaw, StateNet and similar research tools desired.
Demonstrated ability to interact in a positive, respectful manner and establish and maintain cooperative working relationships.
Ability to display excellent customer service to meet the needs and expectations of both internal and external customers.
Excellent listening and interpersonal communication skills to identify critical core competencies based on success factors and organizational environment.
Ability to effectively organize, prioritize, multi-task and manage time.
Demonstrated accuracy and productivity in a changing environment with constant interruptions.
Demonstrated ability to analyze information, problems, issues, situations, and procedures to develop effective solutions.
Ability to exercise strict confidentiality in all matters.
Primarily sedentary, able to sit for long periods of time.
Ability to speak, see and hear other personnel and/or objects. Ability to communicate both in verbal and written form. Ability to travel within the facility. Capable of using a telephone and computer keyboard. Ability to lift up to 10 lbs.

Nice To Haves

Master’s in Health Care Administration, Paralegal or Legal degree preferred or equivalent experience.
experience in regulatory compliance research, privacy regulations and federal regulatory issues involving HIPAA, GLBA, GINA preferred.
Experience with health insurance contracts and certificate forms and working with health plans and employer groups helpful.
In-depth understanding of ASH systems, policies and procedures preferred.
experience with Westlaw, StateNet and similar research tools desired.

Responsibilities

Responsible for researching and the tracking and implementation of privacy requirements related to laws, regulations, accreditation, and industry best practices involving privacy and impacting ASH’s operations.
Monitors new laws and regulations impacting the Privacy Office. Confers as needed with Regulatory and Program Compliance on such developments. Presents new privacy-related laws and regulations to Privacy Office managements and supports, as directed by such management, presentations of the same to company compliance committees and stakeholders. Such presentations include providing recommendations to the stakeholders regarding compliance with such changes. Provides management with reports of such activity as assigned.
As directed, assists the Privacy Office management with compliance efforts with internal departments to complete assessments and identify and remedy compliance concerns in relation to privacy compliance.
Keeps the Privacy Office management informed of all compliance issues for assigned responsibilities. Researches and follows through as needed to comply with company policy, accreditation standards and state and federal regulatory requirements, as well as delegated contractual business associate requirements, for assigned responsibilities. Ensures regulatory agency and contractual deadlines are met.
As directed by management, works with various departments to provide information and direction regarding all privacy-related regulatory agency and contractual requirements. As directed by management, assist such departments in the resolution of issues.
As directed by management, prepares responses to external audits of ASH’s privacy program to ensure timely and accurate responses.
As directed by management, supports audits related to third parties in relation to privacy concerns.
As directed by management, assists with completion of data privacy impact assessments. As directed by the management, assists in the resolution of risk concerns related to such assessments.
As directed by management, assists with policy and procedure management for the Privacy Office.
Assists with the maintenance, review, and development of policies, procedures, templates, and forms related to assigned Privacy Office functions.
Supports with responses to renewing and maintaining privacy or security accreditations.
Assists with preparing and delivering training for internal departments and staff and vendors related to Privacy Office functions and materials.
Reports results of all assigned activities to management and conducts follow up on findings as directed by management.
Completes all ASH University training requirements, including required regulatory trainings, as well as ad hoc trainings required by senior management, within required timeframes.
Completes external trainings and certifications as required by the Privacy Officer for budgeted training/professional development.