Director of Privacy & Vendor Oversight

Director of Privacy and Vendor Oversight

Location: Birmingham, AL

VIVA HEALTH, part of the renowned University of Alabama at Birmingham (UAB) Health System, is a health maintenance organization providing quality, accessible health care. Our employees are a part of the communities they serve and proudly partner with members on their healthcare journeys.

VIVA HEALTH has been recognized by Centers for Medicare & Medicaid Services (CMS) as a high-performing health plan and has been repeatedly ranked as one of the nation's Best Places to Work by Modern Healthcare.

• Comprehensive Health, Vision, and Dental Coverage
• 401(k) Savings Plan with company match and immediate vesting
• Paid Time Off (PTO)
• 9 Paid Holidays annually plus a Floating Holiday to use as you choose
• Tuition Assistance
• Flexible Spending Accounts
• Community Service Time Off
• Life Insurance and Disability Coverage
• Employee Wellness Program
• Training and Development Programs to develop new skills and reach career goals
• Employee Assistance Program

See more about the benefits of working at Viva Health -

The Director of Privacy and Vendor Oversight assists the Executive Director in supervising the Privacy & Vendor Oversight Department. This position provides ownership of the organization’s contract management system, ensuring contracts are centrally maintained, accessible, and reliably tracked to support business operations and internal controls. The role is responsible for maintaining Health Insurance Portability and Accountability Act (HIPAA) privacy policies, procedures and practices that govern the privacy of, and access to, protected health information (PHI) in accordance with the HIPAA.

This position conducts regulatory and business reviews of Business Associate Agreements (BAAs) and coordinates with Legal Counsel, who performs legal review and provides legal approval. This individual leads the development of request for proposals (RFPs) for the evaluation of new vendors and ensures the department performs proper oversight of vendors classified as First Tier, Downstream, and Related Entities (FDRs). Additionally, this role supports the Pharmacy Department in reviewing agreements with Pharmacy Benefit Managers.

• Convert and migrate existing contracts into a centralized contract management database/system, ensuring accuracy, completeness, and proper indexing.
• Ensure contract records, including amendments, renewals, expirations, and related documentation are maintained and updated.
• Establish, document, and enforce contract management policies and procedures and documentation standards.
• Ensure the ongoing integrity, organization, and usability of the contract management system and serve as the primary point of contact for contract documentation and system-related inquiries.
• Ensure the department follows established processes for receiving, documenting, tracking, investigating, and acting on privacy incidents and complaints. In conjunction with the Privacy Officer, ensure timely regulatory reporting and breach notification of HIPAA incidents rising to the level of a HIPAA breach. Take appropriate steps to document and mitigate privacy breaches.
• Develop, direct, and ensure delivery of privacy training and privacy awareness to all employees, contractors, business associates, and other third parties as appropriate including the selection and training of HIPAA point persons in each department and development and dissemination of education materials such as one-point lessons regarding privacy.
• Ensure the organization’s BAAs comply with current regulatory requirements and that the organization maintains fully executed and compliant BAAs with all business associates.
• Supervise Departmental employee(s) whose primary function is vendor oversight.

• Bachelor’s Degree
• 10 or more years’ experience working in health care related businesses
• 5 years’ experience in a managerial or supervisory role
• 5 years’ experience with HIPAA privacy requirements
• Critical thinking skills, problem solving skills, and strong attention to detail
• Ability to work cooperatively with regulators, leaders, and Business Owners in other departments
• Ability to manage employees effectively
• Ability to research vendor offerings, review vendor proposals, and effectively manage vendor performance
• Excellent verbal and written communication skills including the ability to prepare reports, policies, training material, etc.
• Ability to research and interpret applicable laws and regulations and apply them to different processes and departments during internal and subcontractor audits
• Ability to analyze data and identify trends and/or anomalies
• Ability to interpret, summarize, and relay large amounts of detailed information to regulators, customers, and management
• Proficient in Microsoft Word, Excel and Power Point

• Juris Doctor
• Experience issuing Requests for Proposals
• Experience reviewing business and regulatory terms for Pharmacy Benefit Manager services