Privacy Compliance Specialist
About The Position
The Privacy Compliance Specialist is responsible for timely response tracking, logging, and record keeping for privacy-unit incidents. The role serves as the tri-partite incident monitor for incidents identified through the tri-partite monitoring system, reviews incidents for false positives, and conducts preliminary investigations into alleged violations. The specialist gathers facts, documents investigation steps and information, and prepares summaries to support incident determinations. The position also researches privacy incidents and serves as the Data Privacy Review Board investigator. The role supports privacy training, develops and implements workshops and other training materials, assists with non-HIPAA investigations and policy development, manages incident records and communications, and prepares privacy metrics for leadership. It also reviews privacy policies and disclosure records, manages specified access logs, and performs other related duties as assigned.
Requirements
- Bachelor's degree.
- Approximately 2 years of prior related work experience.
- Detail-oriented, with strong organizational and time-management skills and the ability to prioritize and manage multiple tasks and projects.
- Strong computer skills, including Microsoft Word, Excel, and PowerPoint, and Adobe Acrobat.
- Strong writing skills.
Responsibilities
- Monitor the incident monitoring system for WCM incidents, identify false positives, and document trends.
- Conduct preliminary investigations of alleged incidents, gather facts, document investigation steps, and write summaries to support incident determinations.
- Track privacy training activities and prepare reports on training and delinquencies using electronic databases, as needed.
- Support new employee and supervisor privacy training and ensure privacy-related training and meetings are documented, as needed.
- Develop and implement privacy workshops, lectures, and meeting materials.
- Assist with non-HIPAA incident investigations, policy development, and training related to GDPR, ACA, FERPA, and New York State requirements.
- Log and track privacy incidents, calls, and emails in WCM's incident management system; update incidents in real time, close them timely, and escalate bottlenecks and high-risk incidents according to established workflows.
- Manage IT/Security-related privacy incidents, including lost devices, PHI access, Service Now-entered privacy incidents, and DLP incidents.
- Prepare and send privacy-related correspondence under the direction of the privacy leadership team.
- Review privacy policies for accuracy, recommend updates, maintain policies on the website, and manage the privacy policy communication program.
- Review and assist with management of accounting of disclosures.
- Prepare weekly and monthly privacy-related metrics for leadership.
- Review and manage Care Everywhere access logs.
- Perform other related duties as assigned.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
