Director, Health Information Services

Plans, develops, and administers the organization’s policies and procedures for health information, privacy, and access to patient health information, ensuring compliance with federal and state regulations and organizational needs. Collaborates with management and staff to implement, maintain, and improve electronic health records while supervising Health Information Staff.

Responsibilities

• Serves as an internal health information security and confidentiality consultant.
• Advises the organization on current privacy and security legislation.
• Works with management and staff to implement, maintain, and enhance the Electronic Health Record (EHR).
• Develops and implements privacy policies and procedures to ensure the confidentiality, integrity, and availability of protected health information (PHI) and electronic PHI (ePHI).
• Collaborates with the Security Officer and Compliance & Risk Officer to ensure HIPAA compliance and adherence to state and federal regulations.
• Participates in the development, implementation, and ongoing compliance monitoring of trading partner and business associate agreements to address privacy and security requirements.

Managerial Duties

• Coordinates hiring of new employees and transfers of current employees, including screening, interviewing, and selecting qualified staff.
• Determines the need for and hires contingent workforce (e.g., temporary or contract staff).
• Ensures all employees (regular staff, temporary, and contractors) complete:
  • Organization-wide orientation within 60 days of hire.
  • Departmental orientation.
  • Job-specific orientation, including competency completion.
• Conducts Probationary Reviews for new hires, rehires, transfers, promotions, dual job holders, and contractors within 90 days.
• Collaborates with other departments and disciplines to ensure effective organizational operations.

Requirements

• Certification as an RHIA (Registered Health Information Administrator) or RHIT (Registered Health Information Technician) required.
• Two years of management experience with responsibility for developing and implementing policies and procedures to ensure compliance with federal, state, and HIPAA regulatory guidelines.
• Knowledge and experience in information privacy/security laws, access, release of information, and electronic health information systems.
• Ability to apply principles of Health Information Management (HIM), project management, and change management.
• Demonstrated organizational, facilitation, communication, and presentation skills.