Compliance​/Privacy Officer

Summary/objective

The Compliance/Privacy Officer is responsible for the oversight, maintenance, and implementation of OnPoint’s Corporate Compliance program as well as OnPoint's adherence to privacy responsibilities under HIPPA.

The Compliance/Privacy Officer is responsible for the oversight, maintenance, and implementation of OnPoint’s Corporate Compliance program as well as OnPoint's adherence to privacy responsibilities under HIPPA.

Pay range starting at $70,428.80 up to $97,198.40 - placement above minimum salary is based on experience.

• 401(a) retirement: employer matching
• 457 retirement
• Paid holidays

• Medical insurance
• Dental insurance
• Vision Coverage
• Employer funding of Health Savings Account (up to elected deductible amount)

• Disability insurance
• Life insurance (up to $50,000)
• Paid Time Off

• Reasonable accommodations may be made to enable individuals with disabilities to perform these essential functions.
• Serve as Compliance and Privacy Officer and will develop and maintain policies and procedures relative to compliance and privacy.
• Maintain a strategic and comprehensive privacy program to minimize risk and ensure the confidentiality of protected health information (PHI) across all media types.
• Establishes, in collaboration with the Security Officer, a process to log, investigate, and report inappropriate access, use, or disclosure of PHI and monitor.
• Maintains current knowledge of applicable federal and state compliance and privacy laws and accreditation standards.
• Monitor OnPoint’s various sources for compliance complaints such as helpline, incident management reporting system, emails, etc. and respond to internal/external complaints of fraud, waste, or abuse and other violations or wrongdoing according to the compliance plan and policy requirements.
• Ensures investigation are conducted and completed as timely as possible.
• Collaborate and work closely with the Security Officer to ensure alignment between security and privacy compliance programs including policies, practices, and investigations.
• Report to and/or attend Board Executive Committee meetings and/or Board of Directors meeting at least quarterly and as directed by the CEO or warranted by Compliance responsibilities.
• Ensures periodic information privacy risk assessment/analysis, mitigation, and remediation.
• Coordinates with other relevant entity components (e.g., as applicable, Internal Audit, Risk, Quality, IT) to develop work plans for reviewing, monitoring, and auditing compliance risks.
• Ensures ongoing privacy monitoring activities in coordination with the organization’s other compliance and operational assessment functions.
• Ensures organization’s personnel and contractors complete training on compliance, privacy, and confidentiality.
• Works cooperatively with the Information Management Director and/or Recipient Rights Director and other applicable organization units in overseeing patient rights to inspect, amend, and restrict access to PHI when appropriate.
• Ensures all required breach determination, notification, and reporting processes under HIPAA and applicable rules and regulations are completed.
• Establish and administer a process for investigating and acting on privacy and security complaints.
• Works with HR to ensure consistent application of sanctions for compliance and privacy violations.
• Works with Network Manager to ensure consistent application of sanctions for compliance and privacy violations.
• Works with Recipient Rights Director to ensure consumer rights in terms of privacy and confidentiality are upheld and that reported violations are investigated, mitigated, recommend corrective action, and monitored as necessary.
• Initiates, facilitates, and promotes activities to foster information privacy awareness within the organization and related entities.
• Participate in monthly LRE Compliance Regional Operations Advisory Team (ROAT) and keep Chief Executive Officer (CEO), and others as appropriate, informed and up-to-date on compliance ROAT activities.
• Function as the conduit between the regional PIHP and OnPoint for all…