Privacy and Security Specialist

General Description

The Privacy & Security Specialist position is in the Office of Privacy, Security and Contracts (OPSC) within the Director’s Office of the Wyoming Department of Health (WDH). The role involves contributing to developing programs and practices to ensure compliance with privacy and security requirements through excellent customer service, research, and training. Additionally, the position supports OPSC’s functions in privacy, security policy development and implementation, training, monitoring, and assessment.

Reporting to the Chief Policy and Communications Officer, the Privacy & Security Specialist supports the planning, research, assessment, training, and investigation activities of WDH’s business operations to ensure compliance with national best practices and federal and state legal requirements. The position's primary focus is privacy, security, and WDH business operations. Responsibilities include providing technical assistance on permitted uses and disclosures, administering compliance policies and procedures to meet HIPAA requirements, conducting incident investigations, managing breach responses, and supporting other business operations such as training on Wyoming state governmental business operation requirements, facilitating public records requests, and supporting contract drafting processes.

• Comprehensive health, dental, and vision insurance
• Paid vacation, sick leave, FMLA, and holidays
• Retirement - Pension and 457(b) plans that help you build a secure future
• Flexible schedules and work-life balance options
• Meaningful work that makes a difference for Wyoming communities

• Tracking, monitoring, and providing technical assistance and support to risk assessments conducted by WDH divisions, facilities, and programs for software and information systems utilized by the WDH workforce.
• Research and analyze state and federal statutes, regulations, policies, guidance, and industry best practices. Track trends and quality indicators of customer service issues and questions, develop strategies to address low-performing areas and implement a quality improvement process with measurable outcomes to track process improvement.
• Provide technical assistance and support to WDH divisions, facilities, and programs to ensure administrative, technical, and physical safeguards for third-party contracts or services in which WDH shares, uses, or discloses health information and personally identifiable information.
• Conduct and coordinate training activities for OPSC activities, policies, and processes for WDH divisions, facilities, and programs.
• Investigate, research, and analyze potential risks, breaches, or other privacy and security incidents. This position will also assist in the research and development of an agency-wide privacy and security program for IT assets that create, receive, maintain, or process PHI, including hardware, software, and cloud-based applications.

• Knowledge of federal and state laws regarding privacy and security, including an understanding of HIPAA, FERPA/IDEA, and other applicable privacy and security requirements, as well as the ability to apply these laws to non-standard or nuanced situations arising from WDH’s varied functions of provider, payer, facility operations, regulator, and public health authority.
• Knowledge of policy development, best practices, and ability to develop policies and processes with attention to detail to ensure consistency and accuracy.
• Working understanding of project management principles and scalability.
• Understanding and skill in customer service and communication.
• Understanding and skill in conducting investigations, documenting findings, drafting analysis of findings, and providing recommendations for mitigation or corrective action.
• Critical thinking and writing skills.

MINIMUM QUALIFICATIONS:

Bachelor's Degree (typically in Business)

0-3 years of progressive work experience (typically in Business) with acquired knowledge at the level of a Policy & Planning Analyst I

Education &…