Compliance Manager
: Job Details :

Privacy Compliance Manager Location: Midtown Org Unit: Administration Work Days: Monday - Friday Weekly Hours: 35.00 Exemption Status: Exempt Salary Range: $107,400.00 - $128,900.00 *As required under NYC Human Rights Law Int 1208-2018 - Salary range for this role when Hired for NYC Offices Position Summary Under the supervision of the Director of Privacy and in accordance with federal and state regulations, the Privacy manager participates in organization-wide administration of Weill Cornell Medicine privacy policies and procedures. Job Responsibilities Develops and implements strategies to promotes awareness of the organization's HIPAA compliance program. Communicates the organization's key privacy messages to foster HIPAA awareness within the organization and with related entities and business associates. Serves as a subject matter resource on privacy related issues. Participates in meetings and responds to inquiries to advise others on HIPAA regulations and appropriate operational application to specific scenarios. Conducts thorough privacy complaint and data breach investigations utilizing data collection and analysis techniques, interviews, documentation reviews, and necessary research. Documents investigation activities conducted and rationale for conclusions. Recommends remediation steps including policy and procedure development. Presents findings to the Director of Privacy. Participates in HIPAA related risk assessments and ongoing HIPAA compliance monitoring. Utilizes access monitoring software to monitor access to protected health information (PHI) by the workforce and investigates potential inappropriate access. Prepares and presents to management on monitoring activities and outcomes at regular intervals. Receives and coordinates the review and response of the patient amendment request process. Receives and coordinates the review and response of accounting of disclosures. Prepares information required to fulfill timely reporting requirements to regulatory agencies such as Health and Human Services, Office of Civil Rights (OCR) and the State Attorney General offices. Prepares correspondence related to HIPAA communications with patients. Mentors Privacy Compliance Specialists and Coordinators and assists and advises these colleagues in their assigned work as needed. Monitors changes to the HIPAA rules. Drafts updates to policies and procedures to ensure compliance with new or revised HIPAA regulations. Prepares and presents on key metrics and privacy compliance activities at the privacy and security compliance committee meetings. Education Bachelor's Degree Experience Degree related to the Healthcare field is preferred. Certification in Healthcare Privacy Compliance (CHPC), Certification in Healthcare Privacy and Security (CHPS), or ability to achieve certification no later than 24 months from hire date. Additional healthcare industry related credentials are encouraged but not required (e.g. RHIA, RHIT). 3+ years responding to privacy matters and investigations under the HIPAA Privacy Rule, or equivalent combination of education, experience, and/or demonstrated performance with high level work quality & productivity. Knowledge, Skills and Abilities Maintains current knowledge of applicable federal and state privacy laws and standards to ensure organizational adaption and compliance. Skilled in Microsoft Office, telecommunication software (i.e. Teams, Zoom), breach risk assessment tools and software, and access monitoring software (e.g. FairWarning, SPLUNK). Ability to work effectively under pressure to meet deadlines with a strong organization skill set for easy retrieval of information and to ensure competent closure of issues. Strong interpersonal skills and ability to communicate technical information, both written and orally, in a readily understood manner, with colleagues and collaborators at all levels Licenses and Certifications Working Conditions/Physical Demands