Senior Compliance Coordinator - Privacy

University of Iowa•Iowa City, IA

2d•Hybrid

About The Position

The Senior Compliance Coordinator implements and maintains the University of Iowa Health Care HIPAA Privacy Program and helps ensure that UI Health Care employees understand and follow its HIPAA Privacy policies. The position is eligible for hybrid work within Iowa. A work arrangement form is required upon starting, and arrangements are reviewed annually under the applicable remote work and employee travel policies. The role leads privacy investigations and incident management, reviews potential violations, conducts audits and testing, and supports auditing software and system interfaces. For confirmed HIPAA violations, the coordinator performs breach analysis, recommends mitigation, gathers documentation, and prepares required notifications to patients and the Office of Civil Rights. The position also manages business associate agreements, tracks corrective action items, responds to compliance inquiries and complaints, and reports regulatory non-compliance to relevant entities. Additional responsibilities include reviewing external data-sharing requests, analyzing compliance trends, serving as a HIPAA liaison for the University of Iowa Center for Advancement, and conducting related training and audits. The coordinator reviews workflows and contributes to HIPAA policy development, creates and delivers privacy training materials, and provides functional supervision to student employees. The position also assists with hiring and onboarding at the direction of the Associate Director.

Requirements

Bachelor’s degree in Business Administration or a related field, or an equivalent combination of education and experience.
Three years of related experience.
Demonstrated proficiency with MS Word, PowerPoint, and Excel, including formatting tables, retrieving data via queries, and creating presentations.
Excellent written, verbal, and interpersonal communication skills.
Proficiency in public speaking.
Experience developing training and education materials.
Excellent organizational skills.
Flexibility to change priorities quickly and handle multiple tasks simultaneously.
Proven analytical, problem-solving, and organizational skills, with the ability to work independently.
Demonstrated experience working effectively in a welcoming and respectful workplace environment.

Nice To Haves

Master’s degree in a related field.
Knowledge of laws related to the HIPAA Privacy Act.
Knowledge of University of Iowa Health Care policies and procedures.
Experience in project management, quality improvement, or regulatory compliance.
Experience with Electronic Medical Records.

Responsibilities

Lead investigation and incident-management activities, conduct audits and testing, and support auditing software and system interfaces.
Collaborate with management, human resources, privacy and information security teams, and leadership to support compliance with applicable regulations and organizational policies.
Conduct initial reviews of incidents and determine whether further investigation is warranted.
Work with HR and supervisors to investigate potential HIPAA violations, including conducting interviews and assessing whether a violation occurred.
Perform breach analysis for confirmed violations, recommend mitigation, and document actions taken.
Negotiate and manage HIPAA-required business associate agreements across the University of Iowa hybrid entity, consulting legal services as needed.
Track and follow up on Clinical Systematic Analysis action items.
Prepare required patient and Office of Civil Rights notifications when an investigation results in a breach.
Document interviews, mitigation, and decisions in incident summaries.
Answer compliance hotline calls, respond to HIPAA and general compliance inquiries, initiate investigations, and escalate issues as necessary.
Review external data-sharing requests and gather clarifying information through the formal workflow.
Review and respond to patient and employee privacy complaints and concerns.
Track and analyze compliance issues to identify trends.
Conduct reporting to relevant state and federal entities regarding regulatory non-compliance, as directed by the Associate Director and as part of the external standards review process.
Serve as a HIPAA liaison for the University of Iowa Center for Advancement, conduct UICA HIPAA training, and conduct quarterly UICA audits with the Health Care Information Systems team.
Review departmental workflows, recommend improvements, and help ensure processes align with HIPAA Privacy policy requirements.
Participate in writing and amending HIPAA Privacy policies and procedures.
Create and deliver HIPAA Privacy and UI Health Care Compliance training content; identify training needs and develop handouts, FAQs, and customized programs.
Provide functional supervision to student employees.
Assist with hiring, orientation, and training of new staff at the direction of the Associate Director.