Administrative Program Manager I (Compliance and Privacy Manager

Introduction

MHBE is accepting applications for an Administrative Program Manager I/Compliance and Privacy Manager.

The Maryland Health Benefit Exchange is responsible for the administration of Maryland Health Connection, the State's health insurance marketplace, under the Patient Protection and Affordable Care Act of 2010 (ACA).

MHBE works with the Maryland Department of Health, Maryland Insurance Administration, Department of Human Services, and stakeholders statewide.

Our Vision:
High-quality, affordable health coverage for all Marylanders.

Mission Statement:
We improve the health and well-being of Marylanders by connecting them with high-quality, affordable health coverage through innovation, technology, and customer service.

Values:
Diverse & Inclusive, Innovative, Collaborative, Ethical

19

Baltimore City, Maryland

Under the direction of MHBE’s Director of Compliance and Privacy, the Compliance and Privacy Manager is responsible for assisting with the implementation and maintenance of all facets of MHBE’s Compliance and Privacy programs including, but are not limited to, auditing and monitoring activities (departmental and business partner assessments by MHBE and State and Federal assessments of MHBE); overseeing the review and update of agency-wide policies and procedures;

recording, investigating and resolving Fraud, Waste and Abuse (FWA) concerns; overseeing the agency-wide record retention procedure; collaborating across departments in negotiating / finalizing Non-Exchange Entity Agreements (NEEAs), Data Use Agreements (DUAs) and Memorandum of Understandings (MOUs), and maintaining a repository for NEEAs and DUAs; leading and coordinating privacy incident reporting, investigations, mitigations, breach risk analysis and corrective actions; performing Privacy Impact Assessments and self-assessment of compliance with Acceptable Risk Controls for ACA, Medicaid and Partner Entities (ARC-AMPE);

preparing requested reports related to Compliance and Privacy by collecting, analyzing and summarizing data obtained through investigations, work plan submissions and other activities; developing and updating the annual compliance and privacy training; maintaining current knowledge of applicable laws and regulations pertaining to Compliance and Privacy; maintaining timely communication with the Director of Compliance and Privacy on concerns that have been reported and/or observed;

and maintaining effective communications with MHBE stakeholders (internally and externally) while consistently demonstrating a high standard of conduct, ethics and objectivity.

The Compliance and Privacy Manager may also lead special projects assigned by the Director of Compliance and Privacy.

• Assist in the development and implementation of MHBE’s Compliance and Privacy programs by incorporating corrective actions and new requirements into Audit Control Plan, Privacy Program Plan and Privacy Notice.
• Collaborate with the Director of Compliance and Privacy in conducting annual internal reviews of MHBE departments and assist with preparation, coordination and completion of external audits of MHBE as mandated by Centers for Consumer Information and Insurance Oversight (CCIIO), Centers for Medicaid and Medicare Services (CMS), the Internal Revenue Service, and the Maryland Office of Legislative Audits.
• Additionally, collaborate with IT Security, and other departments, to complete the annual Privacy Impact Assessment (PIA) and Privacy Self-assessments. As a part of the PIA, assist in performing annual and ongoing Personally Identifiable Information Inventory assessments, in collaboration with IT Security, to ensure PII inventory is complete and maintained so as to minimize access to, use of, and disclosure of consumer PII (inputs and outputs) to only that amount which is required for individuals to complete their job functions, within and across the Exchange.
• Assist with the development, distribution, implementation and tracking of privacy and compliance training materials, forms and documents, and assist departments across the agency for review, update, renewal and dissemination…