Account Privacy Officer

Great companies need great teams to propel their operations. Join the group that solves business challenges and enhances the way we work and grow. Working at Gainwell offers an incredible opportunity to grow your career in a company that values your contributions and prioritizes work flexibility, learning, and career development.

About the role

As a subject matter expert for HIPAA Privacy and Security regulations and state/local privacy laws, you will provide guidance on OCR and NIST privacy and security controls, investigate and report privacy-related incidents, and conduct risk assessments. You will drive compliance with federal and state reporting requirements, monitor staff compliance with privacy policies, and foster a culture of compliance. Additionally, you will author and maintain documentation supporting HIPAA compliance, including policies, procedures, Incident Response Plans (IRPs), and Privacy Impact Assessments (PIAs).

This role requires 24/7 availability to address emergency incidents and assist clients with privacy rights requests, complaints, and contract deliverables. You will also support corporate privacy initiatives, documentation, and training as requested by the Corporate Privacy Officer.

The above responsibilities are not all-inclusive; additional duties may be assigned to support Gainwell or client account needs.

Responsibilities

• Serve as a subject matter expert for HIPAA Privacy and Security regulations and state/local privacy laws, including OCR and NIST guidance.
• Investigate and report on privacy-related incidents and conduct risk assessments to determine impact.
• Drive compliance with federal and state reporting requirements.
• Conduct monitoring assessments to ensure staff compliance with privacy and security policies.
• Promote a culture of compliance where reporting concerns and incidents is encouraged.
• Author and maintain documentation supporting HIPAA compliance, such as privacy policies, health information management procedures, Incident Response Plans (IRPs), and Privacy Impact Assessments (PIAs).
• Provide 24/7 availability to address privacy and security emergency incidents affecting company and client operations.
• Assist clients with privacy rights requests, including access, amendment, and complaint handling.
• Support the client Contracting Officer with contract initiatives and deliverables.
• Contribute to corporate privacy initiatives, documentation, and training as requested.

Requirements

• A minimum of five (5) years of experience in healthcare privacy activities, including overseeing privacy policies, confidentiality, and release of information.
• Experience developing, conducting, and reporting privacy risk assessments.
• Bachelor’s degree or equivalent diploma, or a combination of education, certification, and relevant experience.
• Active privacy certification from HCCA, IAPP, AHIMA, or equivalent (CIPP/US preferred).

Qualifications

• Experience in the healthcare payer/insurance industry is preferred.
• Experience in a state or federal agency is desired.

Schedule

• Fully remote opportunity with quarterly travel required.
• Must be available to work EST or CST.

Pay

The pay range for this position is $80,600.00 - $115,200.00 per year. Base pay may vary depending on geographic region, internal equity, job-related knowledge, skills, and experience.

Benefits

• Generous, flexible vacation policy for salaried, full-time employees.
• 401(k) employer match.
• Comprehensive health benefits.
• Educational assistance.
• Leadership and technical development academies to build skills and capabilities.