Privacy Manager

Job DescriptionJob DescriptionAre you interested in joining a dynamic company that delivers successful in home treatment to clients with substance use disorder? If you are a caring, compassionate and capable Privacy Manager who meets or exceeds the following, we want to hear from you

Aware Recovery Care (ARC) offers a holistic approach to treatment and changes the way clients receive care throughout the country. ARC is a year-long, home based, addiction treatment program that works collaboratively with a multidisciplinary team to assist clients in their first year of recovery.
In this workplace, employees are given more freedom to map their paths to growth.

Position Summary:
The Privacy Manager supports the efforts of the Corporate Privacy Officer to implement and maintain the company Privacy Program in a manner consistent with applicable federal and state privacy laws and regulations. The Privacy Manager assists in conducting privacy assessments and investigations, writing, revising, and enforcing privacy policies, developing and facilitating training and awareness activities, conducting research on privacy laws and regulations, and performing other key functions, such as compliance auditing, monitoring, and reporting. This position requires strong written and verbal communication and computer skills, and the ability to be creative and take initiative to perform duties with consistently high levels of competency, accuracy, and sound judgment. This position must be able to work both independently and within a team environment.

Position Highlights:

• This position is remote/hybrid out of Wallingford, CT. Candidate must reside in one of the following states: CT, FL, GA, IN, KY, ME, MA, NH, OH, RI, VA, NJ, NY, AR, MN, PA, TX
• This is a full time position with a salary range of 80k-85k

Benefits Highlights
Coverage: Health, vision and dental through Anthem Blue Cross Blue Shield, FSA, HSA that comes with an employer match, along with STD, LTD, life insurance, EAP, and more.
Balance: Competitive Paid Time Off (PTO) plan , 10 paid Holidays, 2 paid floating Holidays of your choice
Development: Certification/continuing education eligibility, leadership development and 1 paid day off a year to go towards personal professional development.
Retirement: 401(k) retirement plan
Culture: Dedication to diversity, equity and inclusion, and a growing working environment.

*In order to be eligible for our full benefits package you must be employed full time at a minimum of 32 hours a week*
*Aware Recovery Care is an equal opportunity employer*Responsibilities

JOB DUTIES AND RESPONSIBILITIES: 

 
Health Information Management Duties: 
 

• Oversee the management of medical records, coding, and health information processes. 
• Develop, implement, and maintain health information policies, procedures, and standards, and develop and administer or oversee training and other awareness communications and campaigns regarding the same. 
• Safeguard the confidentiality of medical records and oversee the prompt and appropriate disclosure of information. 
• Develop and oversee compliance monitoring activities, including record auditing, reporting, dashboarding, managed care reviews, and performance improvement activities. 

 
Privacy Program Duties: 
 

• Develop, implement, and maintain a comprehensive privacy program to promote consistent and effective privacy policies and practices that direct the proper use and disclosure of protected health information (PHI) in paper and electronic from across all media types. 
• Develop, implement, and maintain privacy policies, procedures, and standards, and develop and administer or oversee training and other awareness communications and campaigns regarding the same. 
• Develop, implement, and maintain appropriate privacy and confidentiality consents, business associate agreements, authorization forms, notice templates, and materials relative to company practices and legal requirements. 
• Collaborate with the corporate security officer to align security and privacy programs, policies, practices, investigations, and reporting. 
• Perform or oversee privacy risk assessment, analysis, mitigation, remediation, and compliance monitoring activities. 
• Oversee all required breach determination and notification processes required under HIPAA and applicable breach rules and requirements. 
• Coordinate with regulatory and/or oversight agencies or other legal entities in compliance reviews and investigations. 
• Collaborate with company administration, legal counsel, and other related parties to represent the company’s privacy interests with external parties (federal, state, or local government bodies) who undertake to adopt or amend privacy legislation, regulation, or standard. 
• Serve as the privacy resource to the company regarding the disclosure of PHI and to all departments for all privacy-related concerns. 
• Independently work with company stakeholders to assist in analyzing business processes, document data flows, and advise on potential privacy compliance gaps. 
• Assist in advising workforce on the proper use and disclosure of sensitive information. 
• Independently conduct and manage privacy risk assessments, audits, and investigations. 
• Independently track implementation of corrective action plans and follow-up reviews. 
• Track and respond to internal and external privacy-related incidents and complaints. 
• Track and trend privacy incidents and breaches; assist in reporting and breach notification activities. 
• Maintain expertise in applicable state and federal privacy laws and regulations, including HIPAA, 42 C.F.R. part 2, and the HITECH Act, and provide guidance to the company and its workforce regarding the same. 
• Perform miscellaneous job-related duties as assigned. 

Required SkillsPOSITION QUALIFICATIONS: 

• Bachelor’s degree in public administration, business administration, healthcare administration, paralegal studies or similar field; equivalent education and experience may be considered. 

• 5 years of direct experience in compliance oversight related to state and federal patient privacy law and regulation, including but not limited to HIPAA, serving a legal, compliance, or privacy role or directly related field; 2-3 years of direct management experience. 

• Proficiency with computer systems, Microsoft Office applications, Adobe Acrobat, and virtual conferencing systems is required. 

• Knowledge of state and federal privacy laws and regulations, privacy policies and procedures, terminology used in healthcare compliance, and appropriate business etiquette. Skilled in problem solving and decision-making, verbal and written communication, analysis of data, facts, policies, procedures, and professional standards. 

• Knowledge on 42 CFR Part; Substance abuse or behavioral help experience preferred 

---