Sr. Manager - Privacy

About this role

If you're ready to be part of our legacy of hope and innovation, we encourage you to take the first step and explore our current job openings. Your best is waiting to be discovered. 

Day - 08 Hour (United States of America)

This is a Stanford Health Care job.

A Brief Overview The Sr. Manager, Privacy is generally responsible for the following activities: •Provides operational and people leadership within the Privacy team of SHC's Office of Compliance & Privacy. •Assists the Sr. Director, Privacy with the development, implementation, monitoring, and ongoing improvement of the privacy and information protection efforts across the enterprise. •Identifies and mitigates areas of privacy risk and vulnerability. •Assists in setting priorities and goals for Privacy Specialists, as well as providing mentorship and career development opportunities. •Assists the Sr. Director in maintaining a constant state of regulatory preparedness and timely reporting of breach events to state and federal regulatory agencies; •Leads investigations into potential privacy issues and concerns, along with developing responses for privacy consults. •Supports interactions with government regulators.

Locations Stanford Health Care

What you will do • Contributes to the achievement of Office of Compliance & Privacy goals and objectives and adheres to departmental policies, procedures and standards; complies with governmental and accreditation laws and regulations.

• Assists the Sr. Director with the development of strategic plans for proactive privacy programs designed to identify and mitigate areas of privacy risk and vulnerability.

• Makes recommendations to the Sr. Director related to development of privacy program components, policies, procedures, risk assessments and mitigation plans.

• Designs, implements, maintains and manages privacy program proactive components, including training and education programs, policies and procedures, awareness and communication campaigns, privacy monitoring program, and privacy Intranet website content.

• Develops, implements and manages proactive privacy risk assessments and assists operational management with the development of effective management controls and mitigation plans to protect patient privacy.

• Assists the Sr. Director in maintaining a constant state of regulatory scrutiny-readiness, including effective departmental processes and workflows, documentation of privacy cases and program components, and development of forms, templates, and tools.

• Drafts, tracks, manages change control, and archives privacy-related policies, procedures, communications, newsletters/one point lessons (OPLs), articles, FAQs, advisories, tools, surveys, training and other materials in support of the privacy program.

• Assists the Sr. Director in developing strategies for tracking, trending, benchmarking, predicting and measuring privacy program effectiveness; designs, implements, and manages activities.

• Assists the Sr. Director in the development of board-ready dashboards and reports, in collaboration with the Compliance Program Management team, as assigned.

• Leads investigations of moderate complexity into potential privacy issues and concerns, including investigation interviews with workforce members, vendors, and others associated with the organization.

• Assists in, and/or directly interfaces with, government regulator discussions, develops reports and plans of correction related to regulatory investigations, drafts and maintains documentation and timelines related to government investigations.

• Assists the Sr. Director in managing incident response, including timely responses to government regulators, state and federal reporting, and patient notification.

• Assists the Sr. Director in responding to institutional requests for privacy consults.

• Represents the Office of Compliance & Privacy on designated committees, workgroups, and enterprise initiatives, as required.

• Researches and remains informed of current privacy laws, regulations, advisories and industry best practices, especially as they may evolve. Develops educational resources based on new laws, regulations, etc. and provides education in-person or virtually, as needed.

• Participates in the development of the Office of Compliance & Privacy’s long-term and short-term goals, objectives, plans, policies and procedures.

• Partners with enterprise partners, such as TDS/IS, the Office of General Counsel, HIMS, Human Resources, Risk Management, and other functions to address privacy risks while balancing organizational objectives and strategic plans.

• Provides leadership and mentorship to Privacy Specialists, ensuring sound guidance and approach to privacy investigations and matters, and compliance with state and federal breach reporting timelines, through strong organizational and time management skills.

Education Qualifications • Bachelor’s degree in a work-related discipline/field from an accredited college or university

Experience Qualifications • 3 – 5 years of progressive management experience in a healthcare setting, preferably in an academic medical center, addressing privacy and/or compliance related matters.

• Certified in Healthcare Privacy Compliance (CHPC) from the Health Care Compliance Association preferred.

Required Knowledge, Skills and Abilities • Ability to maintain confidentiality of sensitive information.

• Knowledge and understanding of HIPAA, CMIA, SB541, AB211, HITECH, AB352 and related Federal and State privacy laws, regulations and agencies.

• Ability to craft and present well-written, cohesive, and meaningful communications based on potential readership.

• Knowledge of the purpose, principles, goals, objectives and requirements of a hospital compliance and privacy program.

• Ability to collect large amounts of information and synthesize and communicate the information succinctly and in a meaningful fashion (e.g., SBAR).

• Ability to effectively prioritize work and meet

Similar jobs

• Senior Manager, Privacy Engineering — Upstart · Remote
• Sr. Counsel, Privacy Compliance — Databricks · Bellevue, Washington; Boston, Massachusetts; Chicago, Illinois; Denver, Colorado; Seattle, Washington; Washington, D.C.
• Sr Privacy Specialist — Fresenius Medical Care · Remote
• Sr. Software Developer – Privacy — Toyota · Plano, Texas
• Senior Director, Chief Privacy Lead — ZOLL Medical Corporation · Chelmsford, MA | US PA Pittsburgh Gamma
• Senior Privacy Product Manager — Liveramp · New York | Seattle | San Francisco
• Principal Engineer - Privacy — Databricks · Seattle, Washington
• Principal Engineer - Privacy — Databricks · Mountain View, California