Director, IT HIPAA Security - to relocate area

Work From Home - KY - ULP - AMG

Home Office Remote, KY 40601

First Shift (United States of America)

About UofL Health:
UofL Health is a fully integrated regional academic health system with five hospitals, four medical centers, nearly 200 physician practice locations, more than 700 providers, the Frazier Rehab Institute and Brown Cancer Center.
With more than 12,000 team members—physicians, surgeons, nurses, pharmacists and other highly skilled health care professionals—UofL Health is focused on one mission: delivering patient-centered care to each and every patient each and every day.

Position Summary and Purpose
The Director of IT HIPAA Security will oversee the management and implementation of a comprehensive information and HIPAA security program to ensure organizational compliance with applicable federal and state HIPAA regulations and guidelines, particularly regarding the organizations access to and use of protected health information (PHI). The director will oversee the team responsible for the auditing of IT systems, will evaluate the organizations existing policies and procedures for HIPAA compliance by performing HIPAA risk assessments, collaborates with plan management, administration, and legal counsel to identify and address privacy policies and procedures that require improvement and develop and assist with implementation of new and updated policies and procedures.

• Oversees all audit activities for information systems and reviews results for trends, as needed
• Builds a strategic and comprehensive HIPAA security program that minimizes risk and ensures integrity, confidentiality, and availability of ePHI
• Oversees the development and implementation of HIPAA and information security policies, standards and procedures; coordinates with key Information System offices, data custodians and governance groups in the development of such policies
• Ensures all workforce members are educated on standards and procedures related to security of ePHI
• Oversees the Incident Reporting and Response system to address security incidents (breaches), responds to alleged policy violations, or complaints from external parties
• Evaluates security trends, evolving threats, risks and vulnerabilities and applies tools to mitigate risk as necessary
• Manages ongoing risk assessment program targeting HIPAA and information security matters; recommends methods for vulnerability detection, remediation, and vulnerability testing
• Ensures that the organization is following mandated HIPAA Security Rule requirements for administrative, technical and physical safeguards

• Ensures team remains aware of latest security and privacy legislation, regulations, advisories, alerts and vulnerabilities pertaining to UofL Health
• Collaborates with Information Technology as needed for Recovery Planning, Business Downtime Planning and other projects, as needed
• Ensures that audit controls are in place to monitor activity on electronic systems that contain or use ePHI
• Maintains compliance with all company policies, procedures and standards of conduct
• Complies with HIPAA privacy and security requirements to maintain confidentiality at all times
• Performs other duties as assigned

Job Requirements (Education, Experience, Licensure and Certification)

Education:

• Bachelor’s degree in related field (required)
• Advanced degree in related field (preferred)

Experience:

• Minimum five (5) years of experience in information security, information technology, or related field (required)
• Five (5) years of experience in HIPAA Privacy regulatory requirements (required)
• Experience in developing and administering a healthcare privacy program…