Privacy and Compliance Specialist

Essential Duties and Responsibilities:
- Review reported incidents related to potential or actual privacy, security, or data breaches.
- Coordinate the incident or breach management process (as appropriate) with project management, DOH and the corporate Privacy and Data Protection Office.
- Work with project management, DOH and the corporate Privacy and Data Protection Office to develop and disseminate all required notifications of suspected or actual breach of protection of protected health information or personally identifiable information.
- Mentor Privacy Specialists with incident investigations and review privacy reports and deliverables.
- Conduct project related privacy risk assessments and internal audits.

- Review privacy practices and supports periodic compliance audits of sub-contractors and vendors for the project site to assure compliance with contract requirements, quality principles and Business Associate Agreements.
- Manage the collection, analysis and reporting of privacy program data and metrics.
- Develop departmental work instructions and reference materials.
- Develop project privacy and security training and awareness materials.
- Conduct training regarding compliance, privacy, and quality awareness.
- Prepare data in support of regularly scheduled meetings, facilitating as required.
- Support the effectiveness of the quality management system and complies with ISO 9001.
- Support the Compliance Manager with assigned duties and acts as the department's subject matter expert.
- Responsible for maintaining confidentiality in daily tasks.
- Maintain current knowledge of the federal and state rules, regulations, and guidance related to security and privacy including but not limited to HIPAA, HITECH, Federal Exchange regulations (ACA regulations).
- Maintain awareness of corporate and project privacy and security policies and procedures.

- Develop, maintain, document and report on the Contractor's privacy measures.
- Ensure the system complies with all current and future federal and state privacy regulations and standards.

- Conduct audits and implement safeguards to maintain data integrity and confidentiality, specifically in regard to Protected Health Information (PHI) and Personally Identifiable Information (PII).

- Lead initiatives to train contractor and DHS employees, as requested, on compliance requirements and privacy best practices.

- Provides support for external privacy audits.

The Privacy & Compliance Specialist position is not required to be onsite; however, the client will require travel to our site in Little Rock, AR for the purpose of training, audits, and/or compliance review.

Minimum Requirements

- Bachelor's degree in relevant field of study and 5+ years of relevant professional experience required, or equivalent combination of education and experience.

- Must possess a minimum of five (5) years of experience managing or in a key management position for a large-scale government human services projec...