Privacy Manager

Job Description

Job Description

NOTE : While this is a REMOTE role, it will be supporting Central Time business hours. There will be travel up to 4 times a year.

This is not a General Counsel Privacy focused role.

We are seeking a highly motivated and detail-oriented Privacy Manager with experience in HIPAA compliance to oversee the privacy program and ensure the protection of sensitive information within client's organization.

The Privacy Manager will be responsible for developing, implementing, and maintaining privacy policies and procedures in line with legal and regulatory requirements, focusing on HIPAA compliance and industry standards.

Key Responsibilities :

• Manage and oversee the organization’s privacy program, ensuring compliance with HIPAA and other applicable regulations.
• Develop, implement, and update privacy policies, procedures, and practices across the organization to mitigate privacy risks.
• Ensure proper handling, storage, and transmission of sensitive information, particularly Protected Health Information (PHI).
• Conduct regular audits, risk assessments, and reviews of privacy practices to ensure compliance with regulatory standards and identify areas for improvement.
• Serve as the main point of contact for all privacy-related inquiries, incidents, and investigations.
• Collaborate with cross-functional teams, including IT, Legal, and Compliance, to implement privacy best practices and integrate privacy into operational processes.
• Train and educate staff on privacy policies, regulations, and procedures, emphasizing HIPAA and higher education-related privacy requirements.
• Monitor changes in privacy laws, regulations, and industry standards, providing updates and recommendations to the executive team as necessary.
• Manage and report on privacy incidents, breaches, and violations, ensuring timely response, mitigation, and resolution in accordance with HIPAA breach notification requirements.

Liaise with external regulatory agencies, legal counsel, and third-party vendors to address privacy concerns and maintain compliance.

• Foster a culture of privacy awareness and ensure the organization adheres to its privacy commitments.
• Bachelor’s degree in Healthcare Administration, Law, Information Security, or a related field.
• At least 5 years of experience in privacy management, with a focus on HIPAA compliance.
• Proven experience in the higher education industry is must.
• Strong understanding of HIPAA, FERPA, and other relevant privacy regulations.
• Demonstrated experience in conducting privacy audits, assessments, and incident investigations.
• Ability to collaborate with stakeholders across various departments to ensure privacy integration into business processes.

Excellent communication skills, both verbal and written, with the ability to educate and train staff on privacy issues.

• Strong analytical and problem-solving skills, with attention to detail.
• Certifications such as Certified Information Privacy detail oriented (CIPP), Certified HIPAA detail oriented (CHP), or Certified Information Systems Security detail oriented (CISSP) are a plus.
6 days ago