Privacy Director

Privacy Director

Work Arrangement: Hybrid (On-Site and Remote mix) Requisition Number: 260511 Regular or Temporary: Regular Location: Durham, NC, US, 27710 Personnel Area: HEALTH SYSTEM

Location: Duke Hospital, Duke Cancer Center Institute (Remote) Must reside in one of the following states: Indiana, Michigan, Maine, Ohio, and New Hampshire, Arizona, Hawaii, Illinois, Montana, Colorado, Massachusetts, New Jersey, Pennsylvania, California, Florida, Georgia, Maryland, New York, South Carolina, Tennessee, Texas, Virginia, Washington, DC

General Description of the Job Class

The Privacy Director works with the Senior Director, Privacy across DUHS, Duke University Schools of Medicine and Nursing and their affiliates (Duke Health) to develop, operate and monitor an effective privacy program. The Privacy Director will develop and monitor compliance with federal and state privacy regulations, as well as general industry privacy standards related to protected health information and other restricted or sensitive information collected, used, and/or retained. Assumes management responsibilities of a team of Privacy professionals.

Duties and Responsibilities of Privacy Director

• Collaborate with Procurement, IT Security and business with the review and negotiation of business associate agreements and privacy language as needed, particularly for HIPAA and privacy issues
• Complete audits, risk assessment activities, analysis, and corrective actions
• Continuously learn about new regulatory requirements and industry trends and incorporate them within the privacy program
• Manages and oversees privacy-related investigations and complaints, and the resolutions in collaboration with other compliance leaders, team members, and counsel, as appropriate
• Prepares and reviews privacy-related tracking reports, incidents, and data analytics to identify opportunities for educational opportunities and policies, procedures and process improvement
• Oversee the breach notification process, including any follow-up with affected individuals (e.g., call teams in response to reported breach) and external agencies' investigations, including drafting responses and remediation and implementing corrective action
• Maintains knowledge of rules and regulations (HIPAA, HITECH, state privacy laws and Identity Theft laws) that impact specific ministries and the organization and acts as a subject matter expert to support and provide guidance to workforce members

Minimum Qualification Education

Work requires organizational, analytical and communication skills acquired through the completion of a bachelor's degree program in Business Administration or Health Administration. A Juris Doctor degree, CPA, Master's degree in Hospital Administration, Business Administration, or a related field is preferred—Privacy Director Specific: Juris Doctor degree and privacy certifications, including IAPP's CIPP or CIPM.

Experience

Work requires a minimum of five years of experience in compliance within the healthcare industry, to include leadership experience. Demonstrated ability to proactively identify and manage risks and develop appropriate internal controls. Proficient knowledge of laws, regulations, and standards related to health care compliance. Requires outstanding analytical, written, and verbal communication skills.

Duke is an Equal Opportunity Employer committed to providing employment opportunity without regard to an individual's age, color, disability, gender, gender expression, gender identity, genetic information, national origin, race, religion, sex (including pregnancy and pregnancy related conditions), sexual orientation or military status. Duke aspires to create a community built on collaboration, innovation, creativity, and belonging. Our collective success depends on the robust exchange of ideas—an exchange that is best when the rich diversity of our perspectives, backgrounds, and experiences flourishes. To achieve this exchange, it is essential that all members of our community feel secure and welcome, that the contributions of all individuals are respected, and that all voices are heard. All members of our community have a responsibility to uphold these values. Essential Physical Job Functions: Certain jobs at Duke University and Duke University Health System may include essential job functions that require specific physical and/or mental abilities. Additional information and provision for requests for reasonable accommodation will be provided by each hiring department.