Manager Corporate Privacy Compliance

Join the Cleveland Clinic team, where you will work alongside passionate caregivers and provide patient-first healthcare. Cleveland Clinic is recognized as one of the top hospitals in the nation. At Cleveland Clinic, you will work alongside passionate and dedicated caregivers, receive endless support and appreciation, and build a rewarding career with one of the most respected healthcare organizations in the world. 

As the Manager of Corporate Privacy Compliance, you will assist the Chief Integrity Officer, Sr. Director and Director of Corporate Compliance in the oversight, management and coordination of all activities related to the Cleveland Clinic Privacy Program to maintain compliance with state, federal and international laws; professional ethics and accreditation standards governing the confidentiality and privacy of individuals and their protected health information. In this role, you will oversee the work of direct reports and ensures consistent application of Standard Operating Procedures established by the Corporate Compliance Office.

At Cleveland Clinic, we know what matters most. That's why we treat our caregivers as if they are our own family, and we are always creating ways to be there for you. Here, you'll find that we offer: resources to learn and grow, a fulfilling career for everyone, and comprehensive benefits that invest in your health, your physical and mental well-being and your future. When you join Cleveland Clinic, you'll be part of a supportive caregiver family that will be united in shared values and purpose to fulfill our promise of being the best place to receive care and the best place to work in healthcare.

Responsibilities:

• Ensures policies and procedures and Notice of Privacy Practices (NPP) are timely updated to comply with the changes in the laws and regulations as necessary and appropriate.
• Works with Law Department, management, key departments and committees to ensure Cleveland Clinic has and maintains appropriate privacy and confidentiality consent, authorization forms, Business Associate Agreements and other relevant materials reflecting current organization and legal requirements.
• Works cooperatively with the HIM Director and other applicable Cleveland Clinic departments in overseeing patient rights to inspect, amend, and restrict access to protected health information, when appropriate.
• Maintains accurate documentation of all findings and actions taken.
• Works with Human Resources, Administration and the Law Office to ensure consistent application of sanctions for failure to comply with privacy policies for all individuals in Cleveland Clinic’s workforce and for all business associates, as applicable.
• Works with governmental agencies and accrediting bodies related to privacy matters.
• Assists in the annual privacy risk assessment and development of work plans to address identified risks, including conducting auditing and monitoring activities and conducts education to minimize the risks.
• Tracks and trends privacy incidents, performs periodic privacy risk assessments and conducts ongoing monitoring of compliance with the Cleveland Clinic Privacy Program.
• Promptly informs Director, Sr. Director and CIO of any matter warranting their attention.
• Responsible for supervising, developing and mentoring direct reports.
• Supervises Corporate Compliance Specialists; delegating specific duties and functions as necessary to achieve goals and objectives.
• Other duties as assigned.

Education:

• Bachelor's degree from an accredited college or university required.
• Graduate or law degree preferred.

Certifications:

• One or more of the following must be obtained within one year:
• Certified in Healthcare Privacy Compliance (CPHC) through the Health Care Compliance Association (HCCA)
• Certified Professional in Healthcare Risk Management (CPHRM) through the American Hospital Association (AHA)
• Certification in Healthcare Compliance (CHC) through the Health Care Compliance Association (HCCA)
• Registered Health Information Administrator (RHIA) or Registered Health Information Technologist  (RHIT) thought the American Health Information Management Association (AHIMA)

Complexity of Work:

• Requires critical thinking skills, decisive judgment and the ability to work with minimal supervision.
• Must be able to work in a stressful environment and take appropriate action.

Work Experience:

• A minimum of 5 years direct experience in the application of Federal, State and local healthcare laws and regulations pertaining to information privacy and security to daily operations and occurrences within a healthcare organization, obtained through experience as a nurse or compliance related position (such as HIPAA/privacy compliance officer, specialist, or analyst)
• Familiarity with information technology and security.
• Ability to effectively communicate, both orally and in writing, technical and legal information to employees, patients, business associates, and regulatory agencies regarding privacy issues.
• Project management experience and excellent understanding of root cause analysis or process improvement is strongly preferred.

Physical Requirements:

• Requires dexterity to operate office equipment and the ability to walk to parts of various hospital campuses to attend meetings.
• Must have normal or corrected vision, and the ability to verbally communicate to upper level management.
• Occasional lifting of up to 25 pounds.

Personal Protective Equipment:

• Follows standard precautions using personal protective equipment as required.