Senior Compliance Coordinator - Privacy

UIOWA•Iowa City, IA

1d•Hybrid

About The Position

The Senior Compliance Coordinator implements and maintains the University of Iowa Health Care HIPAA Privacy Program and helps ensure employees understand and comply with UI Health Care HIPAA Privacy policies. The position is eligible for hybrid work within Iowa. A work arrangement form must be completed upon starting, and arrangements are reviewed annually under the remote work program, related policies, and employee travel policy. The role leads privacy investigations and incident management, conducts audits and testing, and supports auditing software and system interfaces. It works with management, Human Resources, privacy and information security colleagues, and leadership to support compliance with HIPAA, HITECH, state and federal requirements, and institutional policies. Responsibilities also include reviewing and responding to complaints and inquiries, assessing breaches and mitigation, managing business associate agreements, supporting external reporting, reviewing workflows and policies, and developing and delivering privacy training. The position provides functional supervision to student employees and assists with hiring and staff orientation and training under the direction of the Associate Director. Required qualifications include a bachelor’s degree in Business Administration or a related field, or an equivalent combination of education and experience, and three years of related experience. Applicants must submit a cover letter and resume addressing the required and desired qualifications. The position is not eligible for University sponsorship for employment authorization now or in the future.

Requirements

Bachelor’s degree in Business Administration or a related field, or an equivalent combination of education and experience.
Three years of related experience.
Demonstrated proficiency with Microsoft Word, PowerPoint, and Excel, including formatting tables, retrieving data via queries, and creating presentations.
Excellent written, verbal, and interpersonal communication skills.
Proficiency in public speaking.
Experience developing training and education materials.
Excellent organizational skills.
Flexibility to change priorities quickly and handle multiple tasks simultaneously.
Proven analytical, problem-solving, and organizational skills.
Ability to work independently.
Demonstrated experience working effectively in a welcoming and respectful workplace environment.

Nice To Haves

Master’s degree in a related field.
Knowledge of laws related to the HIPAA Privacy Act.
Knowledge of University of Iowa Health Care policies and procedures.
Experience in project management, quality improvement, or regulatory compliance.
Experience with Electronic Medical Records.

Responsibilities

Lead investigation and incident management activities, including initial review of potential incidents and determining whether further investigation is warranted.
Conduct audits and testing and support implementation, optimization, and maintenance of auditing software and system interfaces.
Collaborate with management, Human Resources, privacy and information security teams, and leadership to support compliance with applicable privacy and security regulations and policies.
Work with Human Resources and supervisors to investigate potential HIPAA violations, including conducting interviews and assessing whether a violation occurred.
For confirmed violations, perform breach analysis, recommend mitigation such as reeducation, process changes, or Human Resources actions, and collect documentation of mitigation.
Negotiate and manage HIPAA-required business associate agreements across the UI hybrid entity, using Legal Services parameters and consulting legal as needed.
Track and follow up with individuals to ensure Clinical Systematic Analysis action items are completed.
Prepare notifications to patients and the Office of Civil Rights when an investigation results in a breach; document interviews, mitigation, and decisions in incident summaries.
Answer compliance hotline calls, respond to HIPAA and general compliance inquiries, initiate investigations, and escalate issues as appropriate.
Review external data-sharing requests through the formal workflow and gather clarifying information as needed.
Review and respond to patient and employee complaints and concerns regarding privacy practices.
Track and analyze logged compliance issues to identify trends.
Conduct reporting to relevant state and federal entities regarding regulatory non-compliance, as directed by the Associate Director and as part of routine reporting responsibilities.
Serve as a HIPAA liaison for the University of Iowa Center for Advancement, provide UICA HIPAA training, and conduct quarterly UICA audits with the Health Care Information Systems team.
Review departmental workflows, recommend improvements, and ensure processes align with HIPAA Privacy policy requirements.
Participate in writing and amending HIPAA Privacy policies and procedures.
Create and deliver HIPAA Privacy and UI Health Care Compliance training; identify training needs and develop recommendations, handouts, FAQs, and tailored programs based on privacy trends.
Provide functional supervision to student employees.
Assist with hiring staff at the direction of the Associate Director and help develop and implement new-staff orientation and training.