Chief Privacy Officer - Audit and Compliance - University Health (5 days per week; 8:00a-4:30p; Mon-Fri)

Job Description

Privacy Officer Protect Patient Trust. Champion Privacy. Lead with Integrity. At University Health, protecting our patients' information is fundamental to delivering exceptional care. We are seeking an experienced and collaborative Privacy Officer to lead our organization's privacy program and ensure compliance with federal and state privacy regulations, including the Health Insurance Portability and Accountability Act (HIPAA).

Key Responsibilities

• Lead the organization's enterprise-wide privacy program, ensuring compliance with HIPAA and applicable federal and state privacy laws.
• Develop, implement, and maintain privacy policies, procedures, and best practices that protect patient information and support organizational objectives.
• Provide guidance to leadership and staff on privacy regulations, risk mitigation, and appropriate access to protected health information.
• Investigate privacy incidents, coordinate breach response activities, and recommend corrective actions to minimize organizational risk.
• Partner with Compliance, Information Security, Legal, Information Technology, Human Resources, and operational leaders to strengthen privacy governance.
• Design and deliver engaging privacy education and training programs that promote awareness and regulatory compliance.
• Monitor regulatory changes and emerging privacy trends to ensure organizational readiness and continuous improvement.
• Serve as a trusted advisor to leadership on privacy strategy, regulatory compliance, and risk management.
• Provide leadership for Audit and Compliance department operations in the absence of the Director of Compliance and Audit Services, as assigned.

Minimum Qualifications

• Bachelor's degree in Law, Information Systems, Business, or a related field.
• Five (5) or more years of experience in privacy, compliance, legal, risk management, or information security.
• Strong knowledge of healthcare privacy regulations and compliance frameworks, including HIPAA.
• Excellent written and verbal communication skills with the ability to communicate effectively across all levels of the organization.
• Demonstrated ability to build collaborative relationships with executive leadership, providers, managers, and staff.
• Experience developing educational curriculum and delivering effective compliance or privacy training programs.

Preferred Qualifications

• One or more professional certifications such as: Registered Health Information Administrator (RHIA), Certified in Healthcare Privacy Compliance (CHPC), Certified Information Privacy Professional (CIPP), Certified Public Accountant (CPA).
• Experience working within a healthcare organization or integrated health system.