HIPAA Compliance Program:
- Coordinates program activities across departments and colleges designated as HIPAA Covered Components within the HIPAA Privacy Program.
- Participates in the annual review of HIPAA Covered Components and the annual HIPAA risk assessment process.
- Documents results of the annual assessments; tracks action items and remediation activities.
Vendor Privacy Support:
- Coordinates the review and tracking of Business Associate Agreements; performs vendor privacy risk assessments; coordinates the Authorization to Operate process for certain applications storing or processing regulated data.
- Partners with cross-functional teams to ensure appropriate safeguards and documentation are in place.
Training and Awareness Support:
- Supports privacy communication and training initiatives, including the development and updating of privacy training and marketing communications.
- Coordinates with human resources on training delivery, tracking, and reporting.
Privacy Incident Intake and Investigation:
- Supports privacy incident response activities, including incident intake, investigation, documentation, issue tracking, and remediation.
- Prepares summary reports for presentation to senior management and other stakeholders.
Privacy Program Support:
- Maintains current knowledge of applicable federal, state, and international privacy related laws, regulations, and accreditation standards.
- Supports the development, maintenance, and annual review of university privacy policies and procedures.
- Other Duties as Assigned.
Knowledge, Skills, and Abilities:
- Knowledge of privacy laws (e.g., GDPR, HIPAA) and compliance standards.
- Understanding of other key subjects including cyber security and risk management.
- Strong communication skills for articulating privacy risks and policies.
- Strong critical thinking skills and the ability to assess how state, federal, and international privacy requirements apply to specific situations.
- Strong interpersonal skills and a commitment to fostering productive, respectful partnerships across teams and roles.
- Ability to collaborate with stakeholders on privacy matters.
- Ability to develop and enforce privacy policies.
- Ability to meticulously review contracts and data access requests for privacy compliance.
- Ability to translate complex privacy concepts into practical, easy-to-understand guidance for a variety of audiences.
- Familiarity with HIPAA requirements, Business Associate Agreements, or other regulated-data environments.
- Demonstrated curiosity and willingness to learn new and often complex topics, including privacy, legal regulations, and information security.
