Privacy Director at Duke Health

Durham, North Carolina, United States -

Full Time

Start Date

Immediate

Expiry Date

16 May, 26

Salary

0.0

Posted On

15 Feb, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Privacy Program Development, Compliance Monitoring, Regulatory Compliance, Protected Health Information, Risk Assessment, Audits, Corrective Actions, Investigation Management, Complaint Resolution, Breach Notification, HIPAA, HITECH, State Privacy Laws, Identity Theft Laws, Analytical Skills, Communication Skills

Industry

Hospitals and Health Care

Description

At Duke Health, we're driven by a commitment to compassionate care that changes the lives of patients, their loved ones, and the greater community. No matter where your talents lie, join us and discover how we can advance health together. Location: Duke Hospital, Duke Cancer Center Institute (Remote) Must reside in one of the following states: · Indiana, Michigan, Maine, Ohio, and New Hampshire, Arizona, Hawaii, Illinois, Montana, Colorado, Massachusetts, New Jersey, Pennsylvania, California, Florida, Georgia, Maryland, New York, South Carolina, Tennessee, Texas, Virginia, Washington, DC General Description of the Job Class The Privacy Director works with the Senior Director, Privacy across DUHS, Duke University Schools of Medicine and Nursing and their affiliates (Duke Health) to develop, operate and monitor an effective privacy program. The Privacy Director will develop and monitor compliance with federal and state privacy regulations, as well as general industry privacy standards related to protected health information and other restricted or sensitive information collected, used, and/or retained. Assumes management responsibilities of a team of Privacy professionals. Duties and Responsibilities of Privacy Director Collaborate with Procurement, IT Security and business with the review and negotiation of business associate agreements and privacy language as needed, particularly for HIPAA and privacy issues Complete audits, risk assessment activities, analysis, and corrective actions. Continuously learn about new regulatory requirements and industry trends and incorporate them within the privacy program. Manages and oversees privacy-related investigations and complaints, and the resolutions in collaboration with other compliance leaders, team members, and counsel, as appropriate. Prepares and reviews privacy-related tracking reports, incidents, and data analytics to identify opportunities for educational opportunities and policies, procedures and process improvement. Oversee the breach notification process, including any follow-up with affected individuals (e.g., call teams in response to reported breach) and external agencies’ investigations, including drafting responses and remediation and implementing corrective action. Maintains knowledge of rules and regulations (HIPAA, HITECH, state privacy laws and Identity Theft laws) that impact specific ministries and the organization and acts as a subject matter expert to support and provide guidance to workforce members. Minimum Qualification Education Work requires organizational, analytical and communication skills acquired through the completion of a bachelor's degree program in Business Administration or Health Administration. A Juris Doctor degree, CPA, Master's degree in Hospital Administration, Business Administration, or a related field is preferred—Privacy Director Specific: Juris Doctor degree and privacy certifications, including IAPP’s CIPP or CIPM. Experience Work requires a minimum of five years of experience in compliance within the healthcare industry, to include leadership experience. Demonstrated ability to proactively identify and manage risks and develop appropriate internal controls. Proficient knowledge of laws, regulations, and standards related to health care compliance. Requires outstanding analytical, written, and verbal communication skills. OR AN EQUIVALENT COMBINATION OF RELEVANT EDUCATION AND/OR EXPERIENCE Duke is an Equal Opportunity Employer committed to providing employment opportunity without regard to an individual's age, color, disability, gender, gender expression, gender identity, genetic information, national origin, race, religion, sex (including pregnancy and pregnancy related conditions), sexual orientation or military status. Duke aspires to create a community built on collaboration, innovation, creativity, and belonging. Our collective success depends onthe robust exchange of ideas—an exchange that is best when the rich diversity of our perspectives, backgrounds, and experiences flourishes. To achieve this exchange, it is essential that all members of the community feel secure and welcome, that the contributions of all individuals are respected, and that all voices are heard. All members of our community have a responsibility to uphold these values. Essential Physical Job Functions: Certain jobs at Duke University and Duke University Health System may include essential job functions that require specific physical and/or mental abilities. Additional information and provision for requests for reasonable accommodation will be provided by each hiring department.

Responsibilities

The Privacy Director will develop, operate, and monitor an effective privacy program across Duke Health, ensuring compliance with federal and state privacy regulations concerning protected health information and sensitive data. This role involves managing a team, collaborating on agreements, overseeing investigations, managing breach notifications, and acting as a subject matter expert on relevant laws.