Sr. Manager - Privacy

Job Description

If you're ready to be part of our legacy of hope and innovation, we encourage you to take the first step and explore our current job openings. Your best is waiting to be discovered.

Day - 08 Hour (United States of America)

This is a Stanford Health Care job.

A Brief Overview
The Sr. Manager, Privacy is generally responsible for the following activities:
•Provides operational and people leadership within the Privacy team of SHC's Office of Compliance & Privacy.
•Assists the Sr. Director, Privacy with the development, implementation, monitoring, and ongoing improvement of the privacy and information protection efforts across the enterprise.
•Identifies and mitigates areas of privacy risk and vulnerability.
•Assists in setting priorities and goals for Privacy Specialists, as well as providing mentorship and career development opportunities.
•Assists the Sr. Director in maintaining a constant state of regulatory preparedness and timely reporting of breach events to state and federal regulatory agencies;
•Leads investigations into potential privacy issues and concerns, along with developing responses for privacy consults.
•Supports interactions with government regulators.

Locations
Stanford Health Care

What you will do

- Contributes to the achievement of Office of Compliance & Privacy goals and objectives and adheres to departmental policies, procedures and standards; complies with governmental and accreditation laws and regulations.

- Assists the Sr. Director with the development of strategic plans for proactive privacy programs designed to identify and mitigate areas of privacy risk and vulnerability.

- Makes recommendations to the Sr. Director related to development of privacy program components, policies, procedures, risk assessments and mitigation plans.

- Designs, implements, maintains and manages privacy program proactive components, including training and education programs, policies and procedures, awareness and communication campaigns, privacy monitoring program, and privacy Intranet website content.

- Develops, implements and manages proactive privacy risk assessments and assists operational management with the development of effective management controls and mitigation plans to protect patient privacy.

- Assists the Sr. Director in maintaining a constant state of regulatory scrutiny-readiness, including effective departmental processes and workflows, documentation of privacy cases and program components, and development of forms, templates, and tools.

- Drafts, tracks, manages change control, and archives privacy-related policies, procedures, communications, newsletters/one point lessons (OPLs), articles, FAQs, advisories, tools, surveys, training and other materials in support of the privacy program.

- Assists the Sr. Director in developing strategies for tracking, trending, benchmarking, predicting and measuring privacy program effectiveness; designs, implements, and manages activities.

- Assists the Sr. Director in the development of board-ready dashboards and reports, in collaboration with the Compliance Program Management team, as assigned.

- Leads investigations of moderate complexity into potential privacy issues and concerns, including investigation interviews with workforce members, vendors, and others associated with the organization.

- Assists in, and/or directly interfaces with, government regulator discussions, develops reports and plans of correction related to regulatory investigations, drafts and maintains documentation and timelines related to government investigations.

- Assists the Sr. Director in managing incident response, including timely responses to government regulators, state and federal reporting, and patient notification.

- Assists the Sr. Director in responding to institutional requests for privacy consults.

- Represents the Office of Compliance & Privacy on designated committees, workgroups, and enterprise initiatives, as required.

- Researches and remains informed of current privacy laws, regulations, advisories and industry best practices, especially as they may evolve. Develops educational resources based on new laws, regulations, etc. and provides education in-person or virtually, as needed.

- Participates in the development of the Office of Compliance & Privacy’s long-term and short-term goals, objectives, plans, policies and procedures.

- Partners with enterprise partners, such as TDS/IS, the Office of General Counsel, HIMS, Human Resources, Risk Management, and other functions to address privacy risks while balancing organizational objectives and strategic plans.

- Provides leadership and mentorship to Privacy Specialists, ensuring sound guidance and approach to privacy investigations and matters, and compliance with state and federal breach reporting timelines, through strong organizational and time management skills.

Education Qualifications

- Bachelor’s degree in a work-related discipline/field from an accredited college or university

Experience Qualifications

- 3 - 5 years of progressive management experience in a healthcare setting, preferably in an academic medical center, addressing privacy and/or compliance related matters.

- Certified in Healthcare Privacy Compliance (CHPC) from the Health Care Compliance Association preferred.

Required Knowledge, Skills and Abilities

- Ability to maintain confidentiality of sensitive information.

- Knowledge and understanding of HIPAA, CMIA, SB541, AB211, HITECH, AB352 and related Federal and State privacy laws, regulations and agencies.

- Ability to craft and present well-written, cohesive, and meaningful communications based on potential readership.

- Knowledge of the purpose, principles, goals, objectives and requirements of a hospital compliance and privacy program.

- Ability to collect large amounts of information and synthesize and communicate the information succinctly and in a meaningful fashion (e.g., SBAR).

- Ability to effectively prioritize work and meet deadlines in a fast-paced environment.

- Ability to use judgment and make sound decisions.

- Ability to work effectively with individuals at all levels of the organization.

- Demonstrated skills in MS Word, Excel, PowerPoint.

These principles apply to ALL employees:

SHC Commitment to Providing an Exceptional Patient & Family Experience

Stanford Health Care sets a high standard for delivering value and an exceptional experience for our patients and families. Candidates for employment and existing employees must adopt and execute C-I-CARE standards for all of patients, families and towards each other. C-I-CARE is the foundation of Stanford’s patient-experience and represents a framework for patient-centered interactions. Simply put, we do what it takes to enable and empower patients and families to focus on health, healing and recovery.

You will do this by executing against our three experience pillars, from the patient and family’s perspective:

- Know Me: Anticipate my needs and status to deliver effective care

- Show Me the Way: Guide and prompt my actions to arrive at better outcomes and better health

- Coordinate for Me: Own the complexity of my care through coordination

Equal Opportunity Employer Stanford Health Care (SHC) strongly values diversity and is committed to equal opportunity and non-discrimination in all of its policies and practices, including the area of employment. Accordingly, SHC does not discriminate against any person on the basis of race, color, sex, sexual orientation or gender identity and/or expression, religion, age, national or ethnic origin, political beliefs, marital status, medical condition, genetic information, veteran status, or disability, or the perception of any of the above. People of all genders, members of all racial and ethnic groups, people with disabilities, and veterans are encouraged to apply. Qualified applicants with criminal convictions will be considered after an individualized assessment of the conviction and the job requirements.

Base Pay Scale: Generally starting at $79.21 - $104.97 per hour

The salary of the finalist selected for this role will be set based on a variety of factors, including but not limited to, internal equity, experience, education, specialty and training. This pay scale is not a promise of a particular wage.

R2659338