Privacy Officer

Privacy Officer

We're a people first benefit administrator that relies on a fast-growing team of creative thinkers, problem-solvers, and go-getters to bring our participant and client experience to the next level. Our mission? To create better lives and provide a simple and amazing benefits experience. If you love providing excellent service, innovating the way benefits are administered, and being part of an inclusive workplace community, you'll fit right in.

We are seeking a highly skilled and knowledgeable individual to join our team as a Privacy Officer. The Privacy Officer will be responsible for ensuring compliance with the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule as well as other federal and state privacy requirements within our organization. This role involves developing, implementing, and overseeing privacy policies and procedures to safeguard protected health information (PHI) and personally identifiable information (PII) and ensure confidentiality. The Privacy Officer will serve as the primary point of contact for privacy compliance inquiries, privacy training, audits, and privacy-specific incident guidance, while working directly with the Fraud Team under Service, which owns overall incident intake, coordination, and operational handling.

What You'll Do:

• Support privacy-related incident response by advising on privacy obligations, regulatory requirements, documentation, and breach notification analysis, while the Fraud Team under Service owns overall incident handling and cross-departmental coordination.
• Partner with the Fraud Team to provide privacy-specific input on communications, corrective actions, process updates, regulatory notification requirements, and related documentation when an incident involves PHI, PII, or other privacy obligations.
• Develop, maintain, and update privacy incident procedures, including breach notification requirements, privacy investigation protocols, and privacy-related corrective actions, in coordination with the Fraud Team's operational incident response process.
• Develop and Implement Privacy Policies: Design and implement comprehensive privacy policies and procedures in accordance with federal regulations and industry best practices.
• Privacy Training and Education: Create and implement regular training for employees to educate them about the rules and regulations, privacy practices, and their responsibilities in protecting information.
• Privacy Compliance Oversight: Monitor and enforce compliance with privacy regulations throughout the organization, including proper handling, storage, and transmission of PHI.
• Privacy Risk Assessment: Conduct periodic risk assessments to identify potential vulnerabilities in PHI security and privacy practices and develop strategies to mitigate risks.
• Privacy Audits and Monitoring: Coordinate and oversee internal audits to assess compliance with privacy requirements and collaborate with external auditors as needed.
• Conduct a data impact assessment: Identify and minimize risks associated with the processing of personal data. Ongoing review against privacy impact assessment and mapping of collection, use, and sharing of PII. Contribute to all risk assessments under our SOC.
• Privacy Program Evaluation: Regularly evaluate the effectiveness of the organization's privacy program and make recommendations for enhancements or improvements as necessary.
• Compliance Liaison: Serve as the organization's primary liaison with regulatory agencies, legal counsel, clients, and other stakeholders on matters related to privacy compliance.
• Stay Informed on Regulatory Changes: Stay abreast of developments and changes in regulations, as well as emerging trends and best practices in healthcare privacy and security.

Work Environment:

Candidates within 30 miles of one of our four office locations may be asked to come into the office for a hybrid schedule depending on the role.

Eligible candidates will reside in one of the following states: AZ, CA, CO, FL, GA, IA, IL, IN, KS, MA, ME, MI, MN, MO, MT, NC, ND, NE, NJ, NV, NY, OH, OR, PA, SD, TN, TX, UT, AND WA

Why Join Navia?

• Impact: Play a pivotal role in supporting employers and employees nationwide.
• Growth: Advance your skills with a team committed to excellence and innovation.
• Culture: Join a company that values collaboration, innovation, and customer-first solutions.

Perks and Benefits:

• Competitive Salary Range: $80,000-$100,000 Annually
• Generous health benefits
• Companysponsored wellness benefits
• Complimentary Life Insurance and Long-Term Disability Insurance
• Paid time off
• 6 Paid Holidays & 2 Paid Floating Holidays
• Work from home and hybrid schedules available!

Requirements:

• Bachelor's degree in healthcare administration, business administration, information technology, or related field (Master's degree preferred).
• Certified in Healthcare Privacy Compliance (CHPC) or Certified Information Privacy Professional (CIPP) certification preferred.
• Minimum of 5 years of experience in healthcare compliance, privacy, or related field.
• In-depth knowledge of regulations, including the Privacy Rule, Security Rule, and Breach Notification Rule.
• Some knowledge of state privacy laws.
• Strong analytical and problem-solving skills, with the ability to interpret complex regulatory requirements and apply them to practical scenarios.
• Excellent communication and interpersonal skills, with the ability to effectively train and educate staff members at all levels of the organization.
• Demonstrated leadership abilities, with a track record of effectively managing privacy initiatives and driving organizational change.
• High level of integrity and discretion, with a commitment to maintaining confidentiality and protecting patient privacy.

Salary Description $80,000-$110,000 Annually