Privacy and Security Officer

Description

Days Off: Saturday, Sunday
Shift: Office Day
Insurance Benefits: Medical (no premiums/payroll deductions for employee coverage), Dental, Life, Long-term Disability
Other Benefits: Employee Assistance Program (EAP), Flexible Spending Account (FSA), ORCA card subsidy, Paid Time Off (34 days per year), Retirement Plan

About DESC:

Recognized nationally as an innovator and leader in developing solutions to homelessness, DESC is a social services organization, supportive housing operator, and licensed behavioral health treatment provider focused on meeting the needs of people experiencing long-term homelessness and living with complex behavioral health and other medical conditions. Approximately 3,000 people are actively receiving services from DESC at any given point in time. Our vision is a community where all people are shown compassion, treated with dignity, and everyone has a safe, stable, and affordable place to call home.

DESC operates five shelter/emergency housing programs,19 permanent supportive housing facilities with over 1,750 units, several hundred additional scattered site apartments, and a range of behavioral health services including outpatient mental health and substance use disorder treatment, residential crisis stabilization, street outreach, mobile crisis response, and treatment for opioid use disorder.

JOB OVERVIEW:

DESC is looking for someone to join its multi-disciplinary Quality & Information Management (QIM) team to help build and maintain a robust information security and clinical compliance program. This position is responsible for acting as the agency’s Privacy and Security officer, as well as acting as a subject matter expert for privacy and information security related issues across the agency. This position will also support the senior program management to ensure programs comply with all applicable laws, regulations, and contract requirements.

 MAJOR DUTIES AND RESPONSIBILITIES:

• Oversee HIPAA. 42 CFR Part 2 and related privacy compliance programs while maintaining the integrity of client information, including providing training to staff on the HIPAA Privacy Rule and other privacy policies and regulations. 
• Serve as the HIPAA Privacy and Security Officer and HMIS (Homeless Management Information System) Security Officer.
• Supervise the Health Information Management (HIM) Technician and ensure records are released in compliance with applicable state and federal laws.
• Create, implement, and keep up-to-date forms, policies, and procedures that comply with various healthcare privacy and security regulations.
• Monitor and ensure the appropriate dissemination and communication of all regulation, policy, and guideline changes to affected personnel.
• Answer questions and identify issues relating to compliance for staff and management in meetings and direct consultations; Participate as a member of agency senior leadership and be a driver of change for the agency.
• Conduct reviews of programs and data systems to assure compliance and protection of client information.
• Work with the Learning and Development team to implement a robust privacy training program.
• Draft, execute, and oversee business associate agreements (BAAs) with external entities as necessary. Work with Senior Leadership team to ensure adherence to established policies and procedures and facilitate external audits and monitoring and documentation activities.
• Develop, maintain and improve an agency-wide electronic archive system and method for releasing client information.
• Comply with all agency policies and procedures, relevant Washington Administrative Code, RCWs, HIPAA Privacy Rules and King County Behavioral Health Division policies and procedures, HUD regulations, and OMB Uniform Guidance.
• Attend and participate in relevant team meetings, agency sponsored trainings and all-staff meetings.
• Other duties as assigned.

Requirements

MINIMUM QUALIFICATIONS:

• 5 years of relevant experience in a non-profit, healthcare, or government agency, with an understanding of the challenges facing social service providers.
• 3 - 5 years related regulatory or compliance experience with ability to analyze, write and integrate highly technical information into action plans.
• Familiarity with Physical/Behavioral Health, Supportive Housing and Shelter systems.
• Strong oral and written communication skills and ability to work effectively with staff from various backgrounds and disciplines.
• Ability to organize and coordinate work efficiently; prioritize workload, work under pressure with tight timelines and changing priorities.
• Init