Senior Privacy Specialist

SHIFT:

Day (United States of America)

Seeking Breakthrough Makers

Children’s Hospital of Philadelphia (CHOP) offers countless ways to change lives. Our diverse community of more than 20,000 Breakthrough Makers will inspire you to pursue passions, develop expertise, and drive innovation.

At CHOP, your experience is valued; your voice is heard; and your contributions make a difference for patients and families. Join us as we build on our promise to advance pediatric care—and your career.

CHOP’s Commitment to Diversity, Equity, and Inclusion

CHOP is committed to building an inclusive culture where employees feel a sense of belonging, connection, and community within their workplace. We are a team dedicated to fostering an environment that allows for all to be their authentic selves. We are focused on attracting, cultivating, and retaining diverse talent who can help us deliver on our mission to be a world leader in the advancement of healthcare for children.

We strongly encourage all candidates of diverse backgrounds and lived experiences to apply.


A Brief Overview
The Senior Privacy Specialist will be responsible for supporting the enterprise-wide privacy program at Children's Hospital of Philadelphia that includes its hospitals, physician practices, primary and specialty care practices, the Research Institute and Foundation. Main areas of responsibility for this position include, assisting with privacy-related tasks such as incident investigations and data breach notification/reporting, policy development/updates, training, and various monitoring activities to ensure compliance with the Health Insurance Portability and Accountability Act (HIPAA) and other privacy-related laws and regulations. This position reports to the Manager, Privacy Operations within the Office of Compliance and Privacy.
 

What you will do

• Triage and respond to privacy inquiries from workforce members, patient families and regulators on various privacy related matters, concerns, and questions.
• Lead privacy incident investigations, including fact gathering, creating, and maintaining accurate documentation of required HIPAA breach assessment and notification to patient families and regulatory agencies and monitoring of corrective action plans as appropriate.
• Collaborate with other internal stakeholders to investigate, respond to questions and resolve privacy issues involving the collection, use, sharing, etc. of protected health information, personally identifiable information and/or other personal data. Such stakeholders generally include Health Information Management, Digital Technology Services, Information Security, Office of General Counsel, the Research Institute, Human Resources and other clinical and administrative business units/leaders.
• Lead the enterprise-wide proactive audit log monitoring program focused on detecting and investigating potential unauthorized access to electronic patient health information. This includes collaborating with and supporting business leaders and Human Resources through the investigation and sanctions process to ensure corrective/disciplinary action is applied in accordance with Hospital policy.
• Create and deliver privacy awareness and educational materials/communications to increase workforce member’s understanding of CHOP’s privacy policies/job aids and data handling best practices.
• Lead the creation and update of privacy content on the intranet and internet, CHOP policies/job aids, Notice of Privacy Practices and department standard operating procedures including recommending updates based on regulatory/operational changes as appropriate.
• Provide privacy subject matter expertise on operational committees and otherwise serve as an enterprise resource on privacy regulatory requirements.
• Generate reports on privacy program activities including, but not limited to privacy incidents, breaches, proactive monitoring program, and educational activities.
• Participate in and/or manage projects to support the annual privacy work plan, board reporting, and enterprise risk assessment process.
• Conduct ongoing routine audits to monitor compliance with privacy policies, job aids and regulatory requirements.
• Support the Manager and Director, Privacy Operations on other duties to support privacy program operations.
• From time to time, lead and/or support miscellaneous Office of Compliance & Privacy initiatives and/or projects.

Licenses and Certifications

• Certified Information Security Professional/United States (CIPP/US) - International Association of Privacy Professionals (IAPP) - - Preferred

Education

• Bachelor's Degree Health or Business Administr