About this role
<p>Health and Hospital Corporation is an organization that celebrates diversity, and seeks to employ a diverse workforce. We actively encourage all individuals to apply for employment and to seek advancement opportunities. Health and Hospital Corporation also provides reasonable accommodations to qualified individuals with disabilities as required by law. For additional questions please contact us at: [email protected].</p> <div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:16.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px"><b>Job Role Summary</b></H2> </div><div><p style="margin:6.0pt 0.0in;font-size:10.0pt;font-family:Calibri, sans-serif;color:#262626;font-weight:bold"><span style="color:windowtext;font-weight:normal;font-size:12.0pt;font-family:arial, helvetica, sans-serif">Implements, manages, and continuously improves HHC’s privacy program and aligns privacy programs across HHC divisions (MCPHD, IEMS, Eskenazi Health). Serves as the organization’s subject matter expert on privacy matters (including information blocking), leads privacy governance, and ensures compliance with privacy regulations through policy development, training, monitoring, and incident response.</span></p> <p style="margin:6.0pt 0.0in;font-size:10.0pt;font-family:Calibri, sans-serif;color:#262626;font-weight:bold"><span style="color:#00b0f0;font-size:12.0pt;font-family:arial, helvetica, sans-serif">Day in Life:</span></p> <p style="margin:6.0pt 0.0in;font-size:10.0pt;font-family:Calibri, sans-serif;color:#262626;font-weight:bold"><span style="color:windowtext;font-weight:normal;font-size:12.0pt;font-family:arial, helvetica, sans-serif">Provides day-to-day privacy leadership through advising leaders and staff, coordinating privacy governance activities, monitoring compliance risks, delivering training, and investigating/responding to privacy complaints or potential breaches.</span></p></div></div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:16.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px"><b>Essential Duties</b></H2> </div><div><p style="margin:3.0pt 0.0in 2.0pt;font-size:10.0pt;font-family:Calibri, sans-serif"><span style="font-size:12.0pt;font-family:arial, helvetica, sans-serif"><strong>1) Privacy Program Leadership & Governance — 30%</strong></span></p> <ul style="margin-top:0.0in;margin-bottom:0.0in"> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:115%;font-size:12.0pt;font-family:arial, helvetica, sans-serif"><span style="font-size:12.0pt;font-family:arial, helvetica, sans-serif">Develops, implements, monitors, trains on, and reports on the privacy program for HHC and alignment across divisions.</span></li> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:115%;font-size:12.0pt;font-family:arial, helvetica, sans-serif"><span style="font-size:12.0pt;font-family:arial, helvetica, sans-serif">Leads the organization-wide Data Privacy Committee and participates in privacy-related committees as a subject matter expert.</span></li> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:115%;font-size:12.0pt;font-family:arial, helvetica, sans-serif"><span style="font-size:12.0pt;font-family:arial, helvetica, sans-serif">Monitors and educates stakeholders on changes in privacy regulations and emerging privacy risks.</span></li> </ul> <p style="margin:3.0pt 0.0in 2.0pt;font-size:10.0pt;font-family:Calibri, sans-serif"><span style="font-size:12.0pt;font-family:arial, helvetica, sans-serif"><strong>2) Compliance Monitoring, Risk Assessment & Controls — 25%</strong></span></p> <ul style="margin-bottom:0.0in;margin-top:0.0px"> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:115%;font-size:12.0pt;font-family:arial, helvetica, sans-serif"><span style="font-size:12.0pt;font-family:arial, helvetica, sans-serif">Performs information privacy risk assessments and conducts ongoing privacy compliance monitoring activities.</span></li> <li style="margin:0.0in 0.0in 6.0pt 0.0px;line-height:115%;font-size:12.0pt;font-family:arial, helvetica, sans-serif"><span style="font-size:12.0pt;font-family:arial, helvetica, sans-serif">Ensures compliant privacy/confidentiality consents, authorizations, notices, and related materials are maintained.</span></li> </ul> <ul style="margin-bottom:0.0in;margin-top:0.0px"> <li style="margin:0.0in 0.0in 6.0pt 0.0px;line-height:115%;font-size:12.0pt;font-family:arial, helvetica, sans-serif"><span style="font-size:12.0pt;font-family:arial, helvetica, sans-serif">Establishes mechanisms to track access to protected health information and enable qualified individuals to review/report such activity.</span></li> </ul> <p style="margin:3.0pt 0.0in 2.0pt;font-size:10.0pt;font-family:Calibri, sans-serif"><span style="font-size:12.0pt;font-family:arial, helvetica, sans-serif"><strong>3) Training, Consultation & Stakeholder Support — 20%</strong></span></p> <ul style="margin-top:0.0in;margin-bottom:0.0in"> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:115%;font-size:12.0pt;font-family:arial, helvetica, sans-serif"><span style="font-size:12.0pt;font-family:arial, helvetica, sans-serif">Provides and/or directs privacy training for employees, volunteers, contractors, business associates, and others.</span></li> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:115%;font-size:12.0pt;font-family:arial, helvetica, sans-serif"><span style="font-size:12.0pt;font-family:arial, helvetica, sans-serif">Serves as the subject matter expert for the organization in privacy matters, including information blocking.</span></li> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:115%;font-size:12.0pt;font-family:arial, helvetica, sans-serif"><span style="font-size:12.0pt;font-family:arial, helvetica, sans-serif">Works cooperatively with HIM/Medical Records and others to oversee patient rights related to protected health information (inspect, amend, restrict as appropriate).</span></li> </ul> <p style="margin:0.0in 0.0in 0.0in 0.0px;line-height:115%;font-size:12.0pt;font-family:arial, helvetica, sans-serif"> </p></div></div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:16.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px"><b>Associated Job Duties</b></H2> </div><div><p style="margin:3.0pt 0.0in 2.0pt;font-size:10.0pt;font-family:Calibri, sans-serif"><span style="font-size:12.0pt;font-family:arial, helvetica, sans-serif"><strong>4) Incident Response, Investigations & External Reporting — 15%</strong></span></p> <ul style="margin-top:0.0in;margin-bottom:0.0in"> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:115%;font-size:12.0pt;font-family:arial, helvetica, sans-serif"><span style="font-size:12.0pt;font-family:arial, helvetica, sans-serif">Investigates and responds to privacy complaints and possible breaches.</span></li> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:115%;font-size:12.0pt;font-family:arial, helvetica, sans-serif"><span style="font-size:12.0pt;font-family:arial, helvetica, sans-serif">Leads identification and external reporting of privacy-related noncompliance to regulatory/governmental authorities in coordination with strategic guidance from the Chief Compliance Officer; oversees corrective action plans to remediate issues and prevent recurrence.</span></li> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:115%;font-size:12.0pt;font-family:arial, helvetica, sans-serif"><span style="font-size:12.0pt;font-family:arial, helvetica, sans-serif">Collaborates with Human Resources in determining sanctions for noncompliance.</span></li> </ul> <p style="margin:3.0pt 0.0in 2.0pt;font-size:10.0pt;font-family:Calibri, sans-serif"><span style="font-size:12.0pt;font-family:arial, helvetica, sans-serif"><strong>5) Contracts, Agreements & Cross-Functional Alignment — 10%</strong></span></p> <ul style="margin-top:0.0in;margin-bottom:0.0in"> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:115%;font-size:12.0pt;font-family:arial, helvetica, sans-serif"><span style="font-size:12.0pt;font-family:arial, helvetica, sans-serif">Reviews, negotiates, and monitors business associate agreements, non-disclosure agreements, and data sharing agreements; reviews/approves privacy-related contracts to ensure regulatory compliance.</span></li> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:115%;font-size:12.0pt;font-family:arial, helvetica, sans-serif"><span style="font-size:12.0pt;font-family:arial, helvetica, sans-serif">Collaborates with Information Security to review system-related security plans to ensure alignment and consistency with security and privacy practices.</span></li> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:115%;font-size:12.0pt;font-family:arial, helvetica, sans-serif"><span style="font-size:12.0pt;font-family:arial, helvetica, sans-serif">Monitors advancements in privacy technologies to support organizational adaptation and compliance.</span></li> </ul> <ul style="margin-top:0.0in;margin-bottom:0.0in" type="disc"> <li style="margin-bottom:0.0in;margin-top:3.0pt;margin-right:0.0in;font-size:12.0pt;font-family:arial, helvetica, sans-serif"><span style="font-size:12.0pt;font-family:arial, helvetica, sans-serif">This job description reflects management’s assignment of essential functions; it does not prescribe or restrict the tasks that may be assigned. The employee may be asked to perform other duties as needed to support departmental and organizational goals.</span></li> </ul></div></div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:16.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px"><b>Qualifications</b></H2> </div><div><p style="margin:6.0pt 0.0in 6.0pt 0.25in;font-size:10.0pt;font-family:Calibri, sans-serif;color:#262626;font-weight:bold"><span style="font-size:12.0pt;font-family:arial, helvetica, sans-serif">Education</span></p> <ul style="margin-bottom:0.0in;margin-top:4.0px"> <li style="margin:3.0pt 0.0in 1.0pt 0.0px;font-size:12.0pt;font-family:arial, helvetica, sans-serif"><span style="font-size:12.0pt;font-family:arial, helvetica, sans-serif">Required: Bachelor of Science in healthcare or a related field.</span></li> <li style="margin:3.0pt 0.0in 1.0pt 0.0px;font-size:12.0pt;font-family:arial, helvetica, sans-serif"><span style="font-size:12.0pt;font-family:arial, helvetica, sans-serif">Preferred: Juris Doctor (ABA-accredited law school) strongly preferred.</span></li> </ul> <p style="margin:3.0pt 0.0in 1.0pt 0.25in;font-size:10.0pt;font-family:Calibri, sans-serif"><span style="font-size:12.0pt;font-family:arial, helvetica, sans-serif"><strong><span style="color:black">Experience</span></strong></span></p> <ul style="margin-bottom:0.0in;margin-top:4.0px"> <li style="margin:3.0pt 0.0in 1.0pt 0.0px;font-size:12.0pt;font-family:arial, helvetica, sans-serif"><span style="font-size:12.0pt;font-family:arial, helvetica, sans-serif">Required: Eight (8) years of relevant experience working in health care privacy.</span></li> </ul></div></div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:16.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px"><b>Licenses/Certifications Required</b></H2> </div><div><ul style="margin-bottom:0.0in;margin-top:4.0px"> <li style="margin:3.0pt 0.0in 1.0pt 0.0px;font-size:12.0pt;font-family:arial, helvetica, sans-serif"><span style="font-size:12.0pt;font-family:arial, helvetica, sans-serif">Preferred: Admitted to the practice of law in the State of Indiana or comparable state.</span></li> <li style="margin:3.0pt 0.0in 1.0pt 0.0px;font-size:12.0pt;font-family:arial, helvetica, sans-serif"><span style="font-size:12.0pt;font-family:arial, helvetica, sans-serif">Preferred: Certification in Health Care Privacy, Information Privacy, or Healthcare Compliance (CHPC, CIPP/US, CIPM, CHC, or equivalent) strongly preferred.</span></li> </ul></div></div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:16.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px"><b>Knowledge, Skills & Abilities</b></H2> </div><div><p style="margin:3.0pt 0.0in 0.0in;font-size:10.0pt;font-family:Calibri, sans-serif"><span style="font-size:12.0pt;font-family:arial, helvetica, sans-serif"><strong>1) Privacy/Regulatory Knowledge</strong></span></p> <ul style="margin-top:0.0in;margin-bottom:0.0in"> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:115%;font-size:12.0pt;font-family:arial, helvetica, sans-serif"><span style="font-size:12.0pt;font-family:arial, helvetica, sans-serif">Knowledge of public health industry and regulatory requirements.</span></li> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:115%;font-size:12.0pt;font-family:arial, helvetica, sans-serif"><span style="font-size:12.0pt;font-family:arial, helvetica, sans-serif">Knowledge of local, state, and federal health care regulations and legislation, especially privacy/confidentiality.</span></li> </ul> <p style="margin:3.0pt 0.0in 2.0pt;font-size:10.0pt;font-family:Calibri, sans-serif"> </p> <p style="margin:3.0pt 0.0in 0.0in;font-size:10.0pt;font-family:Calibri, sans-serif"><span style="font-size:12.0pt;font-family:arial, helvetica, sans-serif"><strong>2) Leadership, Communication & Relationship Management</strong></span></p> <ul style="margin-top:0.0in;margin-bottom:0.0in"> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:115%;font-size:12.0pt;font-family:arial, helvetica, sans-serif"><span style="font-size:12.0pt;font-family:arial, helvetica, sans-serif">Excellent interpersonal skills, leadership, and problem-solving capabilities.</span></li> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:115%;font-size:12.0pt;font-family:arial, helvetica, sans-serif"><span style="font-size:12.0pt;font-family:arial, helvetica, sans-serif">Professional and effective verbal/written communication; ability to establish positive working relationships across departments and with external partners.</span></li> </ul> <p style="margin:3.0pt 0.0in 2.0pt;font-size:10.0pt;font-family:Calibri, sans-serif"> </p> <p style="margin:3.0pt 0.0in 0.0in;font-size:10.0pt;font-family:Calibri, sans-serif"><span style="font-size:12.0pt;font-family:arial, helvetica, sans-serif"><strong>3) Analytical Judgment & Operating Effectiveness</strong></span></p> <ul style="margin-top:0.0in;margin-bottom:0.0in"> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:115%;font-size:12.0pt;font-family:arial, helvetica, sans-serif"><span style="font-size:12.0pt;font-family:arial, helvetica, sans-serif">Ability to work in a high-volume, rapidly changing environment; exercises discretion with sensitive/confidential matters.</span></li> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:115%;font-size:12.0pt;font-family:arial, helvetica, sans-serif"><span style="font-size:12.0pt;font-family:arial, helvetica, sans-serif">Analytical skills to understand operational processes and technology concepts; customer-focused operations; effective critical thinking/decision-making.</span></li> </ul></div></div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:16.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px"><b>Working Environment</b></H2> </div><div><ul> <li style="font-size:12.0pt;font-family:arial, helvetica, sans-serif"><span style="font-size:12.0pt;font-family:arial, helvetica, sans-serif">Primary work environment includes standard office settings, internal/external business locations, and patient care areas.</span></li> <li style="font-size:12.0pt;font-family:arial, helvetica, sans-serif"><span style="font-size:12.0pt;font-family:arial, helvetica, sans-serif">May be required to walk/stand/sit for extended periods; minimal lifting.</span></li> <li style="font-size:12.0pt;font-family:arial, helvetica, sans-serif"><span style="font-size:12.0pt;font-family:arial, helvetica, sans-serif">May work remotely and/or attend meetings outside primary locations; intermittent work-related travel may be required.</span></li> </ul></div></div></div><p>All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status.</p>