Privacy Officer

The Privacy Officer is responsible for leading and overseeing the organization’s Privacy Program, ensuring compliance with HIPAA, HITECH, 42 CFR Part 2, and other applicable state and federal regulations. This role manages privacy risk, breach response, and regulatory reporting while promoting a culture of confidentiality and compliance.

• Develop, implement, and lead the Privacy Program and maintain Privacy-related policies and procedures.
• Facilitate the investigation of privacy incidents and manage breach notifications.
• Conduct risk assessments and audits to evaluate the effectiveness of the Privacy Program, identify areas of improvement, and ensure compliance with both internal policies and procedures and state and federal regulations.
• Analyze metrics and identify trends to help drive continuous improvement in the Privacy Program.
• Develop, implement, and lead Privacy-related training initiatives in collaboration with internal departments and track Staff compliance.
• Manage regulatory reporting and ensure audit readiness.
• Oversee Client Rights and Privacy Practices
• Mature processes and serve as privacy subject matter expert on cross-functional governance committees.
• Collaborate with Compliance, IT, HR, Legal, Training, and Operations.

• Bachelor's Degree in related field is required
• Master's degree preferred

3 + years of healthcare, healthcare privacy or compliance experience.

• Communication
• Decision Making
• Engagement
• Initiative and Accountability
• Interpersonal
• Learning
• Organizational Alignment
• Quality of Work

• Strong knowledge of HIPAA, HITECH, OCR, and 42 CFR Part 2.
• Knowledge of investigative procedures, internal audit processes, evidence handling, documentation standards, and root-cause analysis.
• Technical proficiency in relevant reporting systems, Microsoft Excel, data analysis tools, and policy management frameworks.
• Ability to partner with Legal, HR, Security, Operations, Compliance, and other internal departments to ensure organizational and regulatory alignment.

• Certified in Healthcare Compliance (CHC) or other relevant health compliance certifications (e.g., Certified in Healthcare Privacy Compliance - CHPC) preferred.

This job is classified as a “safety-sensitive” position as defined by the Oklahoma Medical Marijuana and Patient Protection Act. Due to the “safety-sensitive” classification, an employee in this position would be subject to drug and alcohol testing, including random testing. Marijuana is one of the substances included in the drug panel screening. Possession of a medical marijuana license will not excuse you from the testing process or the consequences of testing positive for marijuana per the Family & Children’s Services Drug Free Workplace Policy, including possible revocation of a job offer or dismissal from employment.

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities
This employer is required to notify all applicants of their rights pursuant to federal employment laws.

For further information, please review the Know Your Rights notice from the Department of Labor.