HIPPA Privacy Officer

Job Posting Title

HIPPA Privacy Officer

Agency

340 OKLAHOMA STATE DEPARTMENT OF HEALTH

Supervisory Organization

340 Office of General Counsel

Job Posting End Date

Refer to the date listed at the top of this posting, if available. Continuous if date is blank.

Estimated Appointment End Date (Continuous if Blank)

Full/Part-Time

Full time

Job Type

Regular

Compensation

The annual salary for this position is up to $99,000.00, based on education and experience

Why you’ll love it here!

RESPECT. COLLABORATION. SERVICE. The Oklahoma State Department of Health (OSDH) is committed to leading Oklahoma to prosperity through health. Our mission is to protect and promote health, prevent disease and injury, and cultivate conditions by which Oklahomans can thrive. Check out why we are passionate about public health and believe it is the career for you!!!

Oh yeah, did we mention perks? We know that benefits matter and that is why we offer a competitive benefits package for all eligible employees.

• Generous state paid benefit allowance to help cover insurance premiums.
• A wide choice of insurance plans with no pre-existing condition exclusions or limitations.
• Flexible spending accounts for health care expenses and/or dependent care.
• Retirement Savings Plan with a generous match.
• 15 days of vacation and 15 days of sick leave the first year for full time employees.
• 11 paid holidays a year.
• Student Loan repayment options & tuition reimbursement.
• Employee discounts with a variety of companies and venders.
• Longevity Bonus for years of service

Job Description

Location: Oklahoma City - 123 Robert S Kerr Avenue

Salary: up to $99,000.00, based on education and experience

Full Time /Part Time: Full Time

Work Schedule: Monday – Friday

Primary Hours: 8 a.m. - 5 p.m.

 

Position Description:

 

The HIPAA Privacy Officer will be within the Office of the General Counsel, responsible for leading and overseeing the agency’s privacy program, ensuring compliance with Health Insurance Portability and Accountability Act (HIPAA), 42 CFR Part 2 and other applicable state and federal regulations.  This position provides strategic guidance to OSDH leadership and oversees the continuous improvement of privacy controls, processes, and services to support organizational and regulatory requirements. This role manages privacy risk, breach response, and regulatory reporting while promoting a culture of confidentiality, security and compliance.

 

Position Responsibilities/Essential Functions:

The specific functions of this position vary, but may include the following:

• Oversees the establishment, implementation, maintenance of, and adherence to privacy policies and procedures; continually ensures that policies and procedures are in current compliance with Federal and State laws and regulations.
• Coordinates with OSDH leadership regarding the review of practices that may impact compliance with the Privacy Rule of HIPAA.
• Performs periodic risk analysis, internal audits and assessments of policies and procedures, staff activities, training programs; determines remediation priorities and resources necessary to address existing or potential privacy issues and problems.
• Establishes and administers a process for receiving, documenting, tracking, investigating, and coordinating responses for all complaints and issues pertaining to privacy compliance.
• Coordinates responses to compliance assessments or investigating initiated by HHS’ Office of Civil Rights or State Attorney General and monitor regulatory updates to ensure the agency remains aligned with federal privacy and any state regulations that overlay HIPAA.
• Drafts and approves Business Associate Agreements, Data Use Agreements, and Data Sharing Agreements.
• Consult with legal counsel, as necessary, regarding privacy standard and other applicable federal and state law.
• Ensure mandatory and ongoing education and training programs for all members OSDH, including when material changes are made to the privacy policies and procedures.
• Organizes and maintains all privacy policies and procedures.
• Reviews contracts, data or sharing agreements, and policies to ensure legal and regulatory compliance.
• Advises on risk mitigation for privacy and cybersecurity issues, ensuring legal obligations are met while protecting sensitive data.
• Role may include participation in governance committees.
• Being present at the office is an essential function of the job.
• Other duties as assigned.

Essential Functions

• Knowledge and understanding of data protection laws, such as HIPAA and related Federal and State privacy laws and regulations.
• Experience with policy development and conducting privacy risk assessments.
• Strong understanding of information security principles and best practices.
• Strong analytical, investigative, communication and leadership skills.

Other Duties

• Demonstrates knowledge of and supports mission, vision, value statements, standards, policies and procedures, operating instructions, confidentiality standards, and the code of ethical behavior.
• Works effectively in team environment, participating and assisting their peers.

This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.

Education and Experience

Education and Experience requirements at this level consists of:

Bachelor’s degree in Business Administration, Information Systems, Healthcare Administration, Legal studies, Cybersecurity or related field; and

Five (5) years experience working in privacy, compliance, information governance, risk management, healthcare operations, information security, or a related field.

An applicant with a master’s degree or Juris Doctor may substitute up to two years of experience to meet the required experience.

 Preferred Qualifications

Knowledge and understanding of data protection laws, such as HIPAA and related Federal and State privacy laws and regulations preferred.

Experience in conducting privacy risk assessments, compliance reviews, investigation, breach response activities, and corrective action planning.

Application Requirements:

• If education, certification or licensure is required to meet qualifications, applicants must provide documentation at the time of application.

• All applicants are subject to a background check and must be legally authorized to work in the United States without visa sponsorship.

 

 Physical Demands and Work Environment:

Work is typically performed in an office setting with climate-controlled settings and exposure to moderate noise levels. While performing the duties of the job, employees are required to talk, stand, walk, and reach with hands and arms.  This position requires long periods of sitting and daily use of computers and phones.  Employees must be willing to complete all job-related travel associated with this position. Being present at the office is an essential function of the job.

Equal Opportunity Employment

The State of Oklahoma is an equal opportunity employer and does not discriminate on the basis of genetic information, race, religion, color, sex, age, national origin, or disability.

Current active State of Oklahoma employees must apply for open positions internally through the Workday Jobs Hub.

If you are needing any extra assistance or have any questions relating to a job you have applied for, please click the link below and find the agency for which you applied for additional information:

Agency Contact