Privacy Director

Duke Careers • Durham, NC

92d • Remote

About The Position

The Privacy Director works with the Senior Director, Privacy across DUHS, Duke University Schools of Medicine and Nursing and their affiliates (Duke Health) to develop, operate and monitor an effective privacy program. The Privacy Director will develop and monitor compliance with federal and state privacy regulations, as well as general industry privacy standards related to protected health information and other restricted or sensitive information collected, used, and/or retained. Assumes management responsibilities of a team of Privacy professionals.

Requirements

• Work requires organizational, analytical and communication skills acquired through the completion of a bachelor's degree program in Business Administration or Health Administration.
• Work requires a minimum of five years of experience in compliance within the healthcare industry, to include leadership experience.
• Demonstrated ability to proactively identify and manage risks and develop appropriate internal controls.
• Proficient knowledge of laws, regulations, and standards related to health care compliance.
• Requires outstanding analytical, written, and verbal communication skills.

Nice To Haves

• A Juris Doctor degree, CPA, Master's degree in Hospital Administration, Business Administration, or a related field is preferred
• Juris Doctor degree and privacy certifications, including IAPP’s CIPP or CIPM.

Responsibilities

• Collaborate with Procurement, IT Security and business with the review and negotiation of business associate agreements and privacy language as needed, particularly for HIPAA and privacy issues
• Complete audits, risk assessment activities, analysis, and corrective actions.
• Continuously learn about new regulatory requirements and industry trends and incorporate them within the privacy program.
• Manages and oversees privacy-related investigations and complaints, and the resolutions in collaboration with other compliance leaders, team members, and counsel, as appropriate.
• Prepares and reviews privacy-related tracking reports, incidents, and data analytics to identify opportunities for educational opportunities and policies, procedures and process improvement.
• Oversee the breach notification process, including any follow-up with affected individuals (e.g., call teams in response to reported breach) and external agencies’ investigations, including drafting responses and remediation and implementing corrective action.
• Maintains knowledge of rules and regulations (HIPAA, HITECH, state privacy laws and Identity Theft laws) that impact specific ministries and the organization and acts as a subject matter expert to support and provide guidance to workforce members.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager
• Number of Employees: 101-250 employees