Privacy and Security Officer

Job Description

Job Description

Description:

Days Off: Saturday, Sunday
Shift: Office Day
Insurance Benefits : Medical (no premiums/payroll deductions for employee coverage), Dental, Life, Long-term Disability
Other Benefits : Employee Assistance Program (EAP), Flexible Spending Account (FSA), ORCA card subsidy, Paid Time Off (34 days per year), Retirement Plan

About DESC:

Recognized nationally as an innovator and leader in developing solutions to homelessness, DESC is a social services organization, supportive housing operator, and licensed behavioral health treatment provider focused on meeting the needs of people experiencing long-term homelessness and living with complex behavioral health and other medical conditions. Approximately 3,000 people are actively receiving services from DESC at any given point in time. Our vision is a community where all people are shown compassion, treated with dignity, and everyone has a safe, stable, and affordable place to call home.

DESC operates five shelter/emergency housing programs,19 permanent supportive housing facilities with over 1,750 units, several hundred additional scattered site apartments, and a range of behavioral health services including outpatient mental health and substance use disorder treatment, residential crisis stabilization, street outreach, mobile crisis response, and treatment for opioid use disorder.

JOB OVERVIEW:

DESC is looking for someone to join its multi-disciplinary Quality & Information Management (QIM) team to help build and maintain a robust information security and clinical compliance program. This position is responsible for acting as the agency’s Privacy and Security officer, as well as acting as a subject matter expert for privacy and information security related issues across the agency. This position will also support the senior program management to ensure programs comply with all applicable laws, regulations, and contract requirements.

  MAJOR DUTIES AND RESPONSIBILITIES:

• Oversee HIPAA. 42 CFR Part 2 and related privacy compliance programs while maintaining the integrity of client information, including providing training to staff on the HIPAA Privacy Rule and other privacy policies and regulations. 
• Serve as the HIPAA Privacy and Security Officer and HMIS (Homeless Management Information System) Security Officer.
• Supervise the Health Information Management (HIM) Technician and ensure records are released in compliance with applicable state and federal laws.
• Create, implement, and keep up-to-date forms, policies, and procedures that comply with various healthcare privacy and security regulations.
• Monitor and ensure the appropriate dissemination and communication of all regulation, policy, and guideline changes to affected personnel.
• Answer questions and identify issues relating to compliance for staff and management in meetings and direct consultations; Participate as a member of agency senior leadership and be a driver of change for the agency.
• Conduct reviews of programs and data systems to assure compliance and protection of client information.
• Work with the Learning and Development team to implement a robust privacy training program.
• Draft, execute, and oversee business associate agreements (BAAs) with external entities as necessary. Work with Senior Leadership team to ensure adherence to established policies and procedures and facilitate external audits and monitoring and documentation activities.
• Develop, maintain and improve an agency-wide electronic archive system and method for releasing client information.
• Comply with all agency policies and procedures, relevant Washington Administrative Code, RCWs, HIPAA Privacy Rules and King County Behavioral Health Division policies and procedures, HUD regulations, and OMB Uniform Guidance.
• Attend and participate in relevant team meetings, agency sponsored trainings and all-staff meetings.
• Other duties as assigned.

MINIMUM QUALIFICATIONS:

• 5 years of relevant experience in a non-profit, healthcare, or government agency, with an understanding of the challenges facing social service providers.
• 3 - 5 years related regulatory or compliance experience with ability to analyze, write and integrate highly technical information into action plans.
• Familiarity with Physical/Behavioral Health, Supportive Housing and Shelter systems.
• Strong oral and written communication skills and ability to work effectively with staff from various backgrounds and disciplines.
• Ability to organize and coordinate work efficiently; prioritize workload, work under pressure with tight timelines and changing priorities.
• Initiative and creativity in problem solving and system development.
• Willingness to be flexible and work cooperatively with co-workers to accomplish all responsibilities of the team.
• Experience working with individuals challenged by economic disadvantages, homelessness, severe & persistent mental illness and/or substance use disorders.
• Ability to appropriately safeguard and handle confidential and proprietary information.

PREFERRED QUALIFICATIONS:

• Experience managing programs covered by HIPAA regulations 
• Master’s degree in Law, Psychology, Healthcare Administration, Social Work, or Public Health.
• HIPAA or Health Information Management Certification
• Knowledge of local Behavioral Health implementation systems, policies and protocols and relevant State and Federal regulations.

PHYSICAL DEMANDS:

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. While performing the duties of this job, the employee will be required sit for long periods of time, communicate with other employees by talking and hearing, required to lift and carry items weighing up to 25 pounds and to operate computer hardware systems. Specific vision abilities required by the job include close vision, distance vision, color vision, peripheral vision, depth perception, and the ability to adjust focus.

EQUAL OPPORTUNITY EMPLOYER:

DESC is committed to diversity in the workplace and promotes equal employment opportunities for all staff members and applicants. The Agency will not discriminate against any employee or applicant for employment on the basis of race, creed, color, sex, gender, sexual orientation, age, national origin, caste, marital status, or the presence of any sensory, mental or physical disability in any employment practice, unless based on a bona fide occupational qualification. Minorities and veterans are encouraged to apply.