Assistant Privacy Officer

About the Role

We are OhioHealth's Privacy subject matter expert, ensuring compliance with all applicable federal and state privacy laws, including the Health Insurance Portability and Accountability Act (HIPAA). This position involves diverse and complex duties with a high level of contact and exposure to highly confidential information. This is a remote position based in Ohio.

Responsibilities

• 50%: Respond to questions, concerns, and allegations of noncompliance related to privacy laws and regulations. This may include communicating with patients, government officials, community members, and workforce members. Conduct investigations involving interviews, fact gathering, analyzing audit logs, developing root cause analyses, and implementing corrective action plans. Document responses and investigations in a software tool, coordinating with departments such as Information Security, Office of the General Counsel, and Human Resources.
• 25%: Develop and deliver training, education, and awareness-building activities to promote a culture of privacy protection, covering privacy laws, regulations, and OhioHealth policy.
• 15%: Actively participate in governance and other committees to represent the privacy team and provide guidance. Identify privacy risks and issues, design solutions and risk management strategies, and track, trend, and analyze privacy data for leadership and governance reports.
• 10%: Serve as the OhioHealth Privacy Officer, including writing or editing applicable policies.

Additional duties may be assigned as needed. As a High Reliability Organization (HRO), responsibilities require a focus on safety, quality, and efficiency.

Requirements

• Bachelor’s Degree in Business, Health Information Management, Law, or a related field (required).
• Five (5) years of healthcare privacy or equivalent experience.
• Certification in Healthcare Privacy Compliance (CHPC), Healthcare Compliance (CHC), Certification in Healthcare Privacy and Security (CHPS), or Certified Information Privacy Professional (CIPP) required within the first year of employment.
• Knowledge and experience in HIPAA, other privacy laws, conducting investigations, and electronic Protected Health Information (ePHI) auditing.
• Ability to work independently and collaboratively across inter- and intra-departmental teams.
• High degree of integrity and business judgment.
• Proficiency in Microsoft Office (Word, Excel, PowerPoint) and experience with the EPIC electronic medical record.
• Experience handling sensitive and confidential information with discretion.
• Six (6) or more years of progressive related work experience, including five (5) years in healthcare.
• Strong leadership, influencing, and relationship-building abilities.
• Demonstrated ability to foster collaboration among diverse team members, provide effective feedback, and empower teams.

Preferred Qualifications

• Master’s Degree.
• Certification in Healthcare Privacy Compliance (CHPC), Healthcare Compliance (CHC), Certification in Healthcare Privacy and Security (CHPS), or Certified Information Privacy Professional (CIPP).
• ePHI auditing experience.

Schedule

• Day shift.
• Scheduled weekly hours: 40.