Compliance and Risk Specialist

Job Details

Job Location:

Administration - Portland, OR 97201

Position Type:
Full Time Education Level: 4 Year Degree Salary Range: $68,640.00 - $85,800.00 Salary Job Shift: Day Job Category:
Health Care Want to giggle while you work? We love to work with kids and their families, providing important care, which is both fun and purposeful.

As an Equal Opportunity Employer our team of experienced, talented professionals honors the company values of compassion, stewardship, excellence, integrity, flexibility, service, and inclusivity in everything we do – it is an integral part of who we are and what we seek in future employees.

Metro Pediatrics is your best choice for a career in pediatric medicine.

We encourage applicants to read more about our company and what we do at

This position is eligible for our $1000 sign on bonus.

• Monitor changes in HIPAA and related federal/state regulations.
• Develop, update, and maintain HIPAA privacy and security policies, including our organizational Compliance Plan, ensuring alignment with current laws, regulations, and statutes.
• Conduct assessments to identify vulnerabilities in handling protected health information (PHI).
• Maintain knowledge and relationship with key third-party risk support organizations to understand and complete any documentation of clinical incidents or potential at-risk situations.
• Collaborate with our IT teams and leaders to ensure completion of any identified security risk findings.
• Collaborate with clinical and administrative teams to develop and optimize compliance, privacy, and security processes while promoting an understanding of the intricacies of regulatory requirements.
• Stay up to date with HIPAA regulations and laws to ensure our organization minimizes risk through proper processes and workflows.
• Build and maintain relationships with key third-party compliance team members, security personnel, and any legal counsel we might need.

• Oversee HIPAA training for staff, including onboarding, periodic refreshers, and targeted training for high-risk departments.
• Ensure employees understand their obligations under HIPAA and know how to respond to privacy/security incidents.
• Provide education to staff and providers on best privacy and compliance practices, such as phishing awareness, workstation security, MyHealth proxy policy, and other privacy or security issues.
• Maintain records of compliance and risk related committees including any activities, training, or policy updates.
• Prepare reports for internal audits, external regulators, or risk committees.

• Coordinate with clinical, administrative, IT, legal, and finance departments to implement HIPAA-compliant processes.
• Work with information systems to ensure technical safeguards (e.g., encryption, access controls) meet HIPAA Security Rule requirements.

• Develop and manage processes for patient access, amendment requests, accounting of disclosures, and restrictions on PHI use.
• Serve as a resource for affiliates or other entities when compliance or risk questions arise.

• Investigate all potential privacy or security breach events, coordinate and document findings and present this information to Compliance team members for outcomes and decisions.
• Organize and summarize incident reports and report out summaries to applicable teams such as the Compliance team and the Peer Review committee.
• Coordinate breach notifications and remediation efforts in compliance with HIPAA requirements.
• Analyze, monitor, report and follow up on identified trends in incidents.

• Always maintain confidentiality of sensitive patient and organizational information.
• Display high standards of office conduct.
• Actively participate in team development and collaborative processes.
• Punctual, regular, timely, and dependable attendance.
• Flexible with capacity to work in a fast-paced and changing environment.

• Bachelor's degree or equivalent work experience in a relevant field or industry preferred.
• Certification from the International Compliance Association, AAPC, or another recognized compliance group required or ability to obtain certification within the first 90 days of hire. CHC, CHPC, or CPCO preferred.
• 1+ years of relevant work experience preferred.
• Strong communication, presentation, and organizational skills