Health Care Privacy and Security Officer

• Serve as a subject-matter expert on state and federal privacy and security laws, advise leadership, managers, and staff on complex privacy and security issues
• Oversee program monitoring, auditing, and risk assessment activities, in order to mitigate vulnerabilities and ensure program compliance
• Manage and update county-wide policies and procedures related to the security, use, access, disclosure, and integrity of protected health information
• Provide privacy and security related training to managers and staff
• Provide technical assistance to HIPAA-regulated subcontractors
• Investigate and respond to privacy and security incidents, including complaints regarding health information privacy violations
• Administer privacy and security risk management strategies, including security risk assessments and process evaluations
• Directly supervise staff members in the Privacy and Security unit

• Proficiency in the elements of an effective privacy compliance program, with demonstrated experience in health care compliance
• Ability to lead a diverse team and motivate and train your staff to be successful in their roles
• Significant experience developing, implementing, and updating policies and/or procedures related to the privacy and security of protected health information
• Professional-level analytical skills to research, interpret, and implement regulatory mandates
• Understanding of risk management models and the ability to utilize data-driven insights for decision-making
• Advanced proficiency in writing, communication, collaboration, and problem-solving
• High integrity and strong moral principles with a commitment to ethical conduct
• Ability to gain trust and "buy-in" from stakeholders to cultivate a culture of information protection
• Strong skills in conflict resolution, resilience, and confidence in managing challenging situations

• Hybrid Telework - A schedule that meets the needs of our staff, department operations, and the communities we serve may be available depending on the assignment
• Salary Advancement - A salary increase after 1,040 hours (6 months when working full-time) for good work performance; eligibility for a salary increase for good performance every year thereafter, until reaching the top of the salary range
• Paid Time Off - Competitive vacation and sick leave accruals, 12 paid holidays, and an additional 8 floating holiday hours per year
• County Paid Health Premium Contributions - 100% premium contribution for the majority of employee-only and employee + family health plan options
• Staff Development/Wellness Pay - Annual benefit allowances of up to $2,000 and ongoing education/training opportunities
• Post-Retirement Health Reimbursement Arrangement - County contributions to help fund post-retirement employee health insurance/benefits
• Retirement - A pension fully integrated with Social Security
• Paid Parental Leave - May be eligible for up to 8 weeks (320 hours) after 12 months of County employment
• Student Loan Debt Relief - County employees may be eligible for Public Service Loan Forgiveness through the U.S. Department of Education

Education and Experience: Any combination of education, training, and experience which would likely provide for the possession of stated knowledge and abilities. Normally this would include, significant academic course work in business/public administration, health administration, systems analysis, finance, economics, or a closely related field, and three years of professional level experience in a health care setting that included significant responsibility in any of the following areas: regulatory compliance or privacy, quality assurance and control, legal analysis of health care administration, and/or fiscal operations; including at least one year of supervisory experience. A Bachelor's or Master's degree in any of the above fields is highly desired.

License: Possession of a valid driver's license at the appropriate level including special endorsements, as required by the State of California, may be required, depending upon assignment, to perform the essential job functions of the position.

Certificate: The position designated as the Privacy and Security Officer must possess or obtain within eighteen (18) months of appointment a health care privacy compliance certificate from a certified organization (e.g. Certified Information Privacy Professional, Certified in Healthcare Privacy and Security, Registered Health Information Administrator), and maintain certification while in the job classification. The position designated as the Health Care Compliance Officer must possess or obtain within eighteen (18) months of appointment a healthcare compliance certificate from a certified association (e.g. Certified in Healthcare Compliance) and maintain certification while in the job classification.

Considerable knowledge of: health care operations; federal and state laws and regulations pertaining to health care providers such as: Medicare and Medi-Cal, Sarbanes Oxley requirements; health information privacy laws, including those related to access, release of information, and release control technologies (Health Insurance Portability and Accountability Act of 1996 (as amended)); Office of Inspector General's compliance program, government compliance; regulatory audits; electronic security issues and technologies.

Knowledge of: principles and practices of general management and public administration, program management, and supervision; quality improvement principles; methods of legal and factual research; techniques of systems analysis; principles and practices of project planning, monitoring and evaluation; effective interviewing and investigation techniques; English grammar, usage, and syntax; computer software including word processing, spreadsheet and database programs; health care programs provided by the County.

Ability to: research, understand, interpret and apply health care rules, regulations, and ordinances and federal, state, and local legislation pertaining to health care and/or health information privacy; analyze problems and/or complex data, draw conclusions, explain implications, and make sound recommendations; plan, organize, and direct comprehensive programs including developing and implementing short and long-range project goals and objectives; plan organize, delegate, and prioritize work of self and others in order to meet deadlines; establish performance standards and evaluate performance; communicate effectively both verbally and in writing including the ability to draft complex documents and reports; effectively explain rules, regulations, and procedures; gain cooperation and compliance from staff; represent the County in an effective and professional manner and establish and maintain effective working relationships with the public, other departments and agencies, boards and commissions, public officials, community groups and others contacted in the course of work; interview effectively; maintain confidentiality.

• Your application information and your responses to the supplemental questions are evaluated and taken into consideration throughout the entire selection process.
• You should list all employers and positions held within the last ten years in the work history section of your application. Be as thorough as possible when responding to the supplemental questions.
• You may include history beyond ten years if related to the position for which you are applying. If you held multiple positions with one employer, list out each position separately.
• Failure to follow these instructions may impact your competitiveness in this process or may result in disqualification.