Sr. Manager - Privacy

Stanford Health Care • Palo Alto, CA

19h • $79 - $105 • Onsite

About The Position

The Sr. Manager, Privacy is generally responsible for providing operational and people leadership within the Privacy team of SHC's Office of Compliance & Privacy. This role assists the Sr. Director, Privacy with the development, implementation, monitoring, and ongoing improvement of privacy and information protection efforts across the enterprise. The position identifies and mitigates areas of privacy risk and vulnerability, and assists in setting priorities and goals for Privacy Specialists, providing mentorship and career development opportunities. The Sr. Manager also assists the Sr. Director in maintaining a constant state of regulatory preparedness and timely reporting of breach events to state and federal regulatory agencies. They lead investigations into potential privacy issues and concerns, along with developing responses for privacy consults and supporting interactions with government regulators.

Requirements

• Bachelor’s degree in a work-related discipline/field from an accredited college or university
• 3 – 5 years of progressive management experience in a healthcare setting, preferably in an academic medical center, addressing privacy and/or compliance related matters.
• Ability to maintain confidentiality of sensitive information.
• Knowledge and understanding of HIPAA, CMIA, SB541, AB211, HITECH, AB352 and related Federal and State privacy laws, regulations and agencies.
• Ability to craft and present well-written, cohesive, and meaningful communications based on potential readership.
• Knowledge of the purpose, principles, goals, objectives and requirements of a hospital compliance and privacy program.
• Ability to collect large amounts of information and synthesize and communicate the information succinctly and in a meaningful fashion (e.g., SBAR).
• Ability to effectively prioritize work and meet deadlines in a fast-paced environment.
• Ability to use judgment and make sound decisions.
• Ability to work effectively with individuals at all levels of the organization.
• Demonstrated skills in MS Word, Excel, PowerPoint.

Nice To Haves

• Certified in Healthcare Privacy Compliance (CHPC) from the Health Care Compliance Association preferred.

Responsibilities

• Provides operational and people leadership within the Privacy team of SHC's Office of Compliance & Privacy.
• Assists the Sr. Director, Privacy with the development, implementation, monitoring, and ongoing improvement of the privacy and information protection efforts across the enterprise.
• Identifies and mitigates areas of privacy risk and vulnerability.
• Assists in setting priorities and goals for Privacy Specialists, as well as providing mentorship and career development opportunities.
• Assists the Sr. Director in maintaining a constant state of regulatory preparedness and timely reporting of breach events to state and federal regulatory agencies.
• Leads investigations into potential privacy issues and concerns, along with developing responses for privacy consults.
• Supports interactions with government regulators.
• Contributes to the achievement of Office of Compliance & Privacy goals and objectives and adheres to departmental policies, procedures and standards; complies with governmental and accreditation laws and regulations.
• Assists the Sr. Director with the development of strategic plans for proactive privacy programs designed to identify and mitigate areas of privacy risk and vulnerability.
• Makes recommendations to the Sr. Director related to development of privacy program components, policies, procedures, risk assessments and mitigation plans.
• Designs, implements, maintains and manages privacy program proactive components, including training and education programs, policies and procedures, awareness and communication campaigns, privacy monitoring program, and privacy Intranet website content.
• Develops, implements and manages proactive privacy risk assessments and assists operational management with the development of effective management controls and mitigation plans to protect patient privacy.
• Assists the Sr. Director in maintaining a constant state of regulatory scrutiny-readiness, including effective departmental processes and workflows, documentation of privacy cases and program components, and development of forms, templates, and tools.
• Drafts, tracks, manages change control, and archives privacy-related policies, procedures, communications, newsletters/one point lessons (OPLs), articles, FAQs, advisories, tools, surveys, training and other materials in support of the privacy program.
• Assists the Sr. Director in developing strategies for tracking, trending, benchmarking, predicting and measuring privacy program effectiveness; designs, implements, and manages activities.
• Assists the Sr. Director in the development of board-ready dashboards and reports, in collaboration with the Compliance Program Management team, as assigned.
• Leads investigations of moderate complexity into potential privacy issues and concerns, including investigation interviews with workforce members, vendors, and others associated with the organization.
• Assists in, and/or directly interfaces with, government regulator discussions, develops reports and plans of correction related to regulatory investigations, drafts and maintains documentation and timelines related to government investigations.
• Assists the Sr. Director in managing incident response, including timely responses to government regulators, state and federal reporting, and patient notification.
• Assists the Sr. Director in responding to institutional requests for privacy consults.
• Represents the Office of Compliance & Privacy on designated committees, workgroups, and enterprise initiatives, as required.
• Researches and remains informed of current privacy laws, regulations, advisories and industry best practices, especially as they may evolve. Develops educational resources based on new laws, regulations, etc. and provides education in-person or virtually, as needed.
• Participates in the development of the Office of Compliance & Privacy’s long-term and short-term goals, objectives, plans, policies and procedures.
• Partners with enterprise partners, such as TDS/IS, the Office of General Counsel, HIMS, Human Resources, Risk Management, and other functions to address privacy risks while balancing organizational objectives and strategic plans.
• Provides leadership and mentorship to Privacy Specialists, ensuring sound guidance and approach to privacy investigations and matters, and compliance with state and federal breach reporting timelines, through strong organizational and time management skills.

Benefits

• Stanford Health Care sets a high standard for delivering value and an exceptional experience for our patients and families. Candidates for employment and existing employees must adopt and execute C-I-CARE standards for all of patients, families and towards each other. C-I-CARE is the foundation of Stanford’s patient-experience and represents a framework for patient-centered interactions. Simply put, we do what it takes to enable and empower patients and families to focus on health, healing and recovery.
• You will do this by executing against our three experience pillars, from the patient and family’s perspective: Know Me: Anticipate my needs and status to deliver effective care Show Me the Way: Guide and prompt my actions to arrive at better outcomes and better health Coordinate for Me: Own the complexity of my care through coordination

What This Job Offers

• Job Type: Full-time
• Career Level: Manager