Privacy Director

Be among the first 25 applicants

ix Hospice we guide patients and families through the end‑of‑life journey. Through compassionate care, we focus on our patient’s quality of life, empowering them to make the most of their time with dignity, comfort and respect. If you are ready to be part of an extraordinary team of caregivers, then come work where you matter.

The Privacy Director is responsible for assisting with the development, implementation, and management of St. Croix Hospice’s privacy program. This role ensures that patient privacy and confidentiality are maintained in accordance with all relevant laws, including the Health Insurance Portability and Accountability Act (HIPAA), state‑specific privacy regulations, and the organization’s internal privacy policies. The Privacy Director will work closely with the compliance, legal, and IT teams to safeguard sensitive health information and mitigate privacy risks.

The Privacy Director will play a pivotal role in promoting a culture of privacy, accountability, and transparency throughout the organization while ensuring compliance with both federal and state privacy regulations.

• Leadership and Strategic Oversight
  • Governance and Advisory:
    Assist with the organization's privacy program and policies, providing guidance and recommendations to the Chief Compliance Officer and senior leadership, including the CEO and Board of Directors.
  • Report regularly on privacy risks, trends, breaches, and compliance metrics to the Chief Compliance Officer, Board, and other stakeholders as needed.
  • Collaborate with other departments, including IT, HR, and legal, to ensure privacy practices are embedded throughout the organization.
• Privacy Program Development and Oversight
  • Assist with the development and implementation of a comprehensive privacy program that protects patient information, complies with applicable privacy regulations, and addresses emerging privacy risks.
  • Ensure that privacy policies, procedures, and controls are up to date and in compliance with relevant laws, including HIPAA, HITECH, and state‑specific regulations.
  • Lead the creation of a privacy governance framework and ensure effective privacy risk management strategies are in place.
• Privacy Risk Management and Monitoring
  • Risk Assessment and Mitigation:
    Conduct regular privacy risk assessments and audits to identify vulnerabilities in patient data protection practices and develop strategies to mitigate identified risks.
  • Assess privacy‑related threats and vulnerabilities, working with IT and other departments to strengthen data security measures and ensure compliance with privacy regulations.
  • Develop and maintain an incident response plan for privacy breaches, ensuring that all potential privacy incidents are addressed promptly and in compliance with regulations.
• Privacy Auditing and Compliance Monitoring
  • Lead privacy audits and compliance reviews to assess adherence to privacy policies and regulations across the organization.
  • Monitor internal systems and processes to ensure compliance with federal and state privacy laws, including appropriate handling, storage, and disposal of protected health information (PHI).
  • Oversee third‑party vendor relationships and ensure that privacy requirements are met through contractual agreements, assessments, and ongoing monitoring.
• Privacy Training and Awareness
  • Develop, implement, and oversee a comprehensive privacy training program for all employees to ensure they understand their role in protecting patient privacy and complying with applicable laws.
  • Ensure that training is updated regularly to reflect changes in privacy regulations, organizational policies, and emerging threats to privacy.
  • Provide guidance to leadership and employees regarding privacy‑related best practices and the handling of PHI.
• Privacy Culture
  • Foster a culture of privacy within the organization by promoting awareness and accountability for privacy‑related matters at all levels of the organization.
  • Promote privacy as a core value within the organization, helping to ensure patient trust and safeguarding sensitive information.
• Privacy Incident…