Privacy Officer & Records Manager

State of Utah•Provo, UT

21h•Onsite

About The Position

This role serves as the designated HIPAA Privacy Officer, responsible for maintaining and enforcing privacy policies, procedures, and the Notice of Privacy Practices (NPP). The position involves conducting ongoing privacy risk assessments, managing privacy incident response, performing breach risk assessments, and handling notifications in accordance with federal and state laws. Additionally, the role oversees health records management, including retention, archiving, legal holds, destruction schedules, and Release of Information (ROI) protocols. A key aspect of this position is developing and delivering mandatory HIPAA privacy training for all workforce members and fostering a culture of data privacy. The Privacy Officer & Records Manager will also oversee the privacy review process for vendor contracts and ensure the execution and management of Business Associate Agreements (BAAs). This role will lead investigations into privacy complaints, audit EHR access logs, and act as the primary point of contact for regulatory inquiries, such as those from the OCR.

Requirements

Minimum 3–5 years of experience in healthcare privacy, health information management (HIM), or healthcare compliance within a HIPAA Covered Entity.
RHIT (Registered Health Information Technician) is required.
Bachelor’s degree in Health Information Management, Healthcare Administration, Law, or a related field.
Deep working knowledge of HIPAA Privacy and Security Rules, HITECH, 42 CFR Part 2 (if applicable), and state healthcare privacy laws.

Nice To Haves

CHPC (Certified in Healthcare Privacy Compliance) or CHPS (Certified in Healthcare Privacy and Security) are highly preferred.

Responsibilities

Serve as the designated HIPAA Privacy Officer, maintaining and enforcing privacy policies, procedures, and Notice of Privacy Practices (NPP).
Perform ongoing privacy risk assessments, manage privacy incident response, conduct breach risk assessments, and handle notifications in accordance with federal and state laws.
Oversee health records management, including retention, archiving, legal holds, destruction schedules, and Release of Information (ROI) protocols.
Develop and deliver mandatory HIPAA privacy training for all workforce members and foster a culture of data privacy.
Oversee the privacy review process for vendor contracts and ensure execution and management of Business Associate Agreements (BAAs).
Lead investigations into privacy complaints, audit EHR access logs, and serve as the primary point of contact for regulatory inquiries (e.g., OCR).

Benefits

Comprehensive violence prevention and deescalation training for all employees during orientation.
Ongoing training is provided to prioritize staff and patient safety.
Job Stability: Enjoy the security and reliability of employment within a well-established organization.
Career Growth: Develop valuable skills and gain opportunities for leadership within a large organization.
Meaningful Work: Contribute to an important service that benefits the community and supports organizational goals.
Supportive Work Environment: Be part of a team that values cooperation, strong work ethics, and mutual support.
Health Insurance: Multiple medical plan options, including a High-Deductible Health Plan with an associated Health Savings Account. Opt-out cash benefit available.
Dental & Vision: Multiple dental and vision plan options available.
Paid Leave: Accrue 4 hours of annual leave and 4 hours of sick leave per pay period, with accrual rates increasing with state longevity. 12 paid holidays per year.
Retirement: A generous 10% employer contribution to your Utah Retirement Systems (URS) account (Tier II). Options include a Pension/401(k) Hybrid Plan or a Defined Contribution Plan.
Access to a UTA Bus Pass.
Cafeteria on site with meals, snacks and drinks available for purchase.
Access to the Utah State Hospital Disc Golf Course.
Access to comfort rooms while on campus, as well as other mental wellness benefits.