Privacy and Security Officer - HSCSN

Kids Are Our Everything.

Department

Pay Range

This position is primarily responsible for HSCSN privacy and security compliance activities. Responsibilities include but are not limited to, as it relates to privacy and security -  compliance reporting efforts, investigations, and regulatory compliance across multiple business functions. Additional key responsibilities include directing and overseeing the implementation of privacy and security compliance efforts at HSCSN through approving requirements and monitoring ongoing compliance adherence.

Minimum Education

Bachelor's degree - in Health Care Administration, Clinical, Law, Public Health, Business or related field

Minimum Experience

Minimum five - eight (5-8) years experience in compliance, healthcare privacy or information security, and/or health care operations or insurance/health plan governance or a directly related field. Additional equivalent work experience in a directly related field may be substituted for the degree requirement.

Required Skills/Knowledge

Health Care Industry
Attention to Detail
Communication
Critical Thinking
Influencing Others
Integrity
Problem Solving
Cross Collaboration
Project Management

Functional Accountabilities

• Oversee and ensures HSCSN’s compliance with HIPAA Privacy, Security and Breach Notification Rules and applicable state privacy laws and CASSIP contract requirements, including the assessment of current state compliance to identify gaps and corrective actions and monitors ongoing compliance adherence.
• Collaborate with Children’s National Privacy and Security Programs teams to ensure HSCSN’s adherence to Children’s National Privacy and Security standards and safeguards.  
• Report efforts across multiple HSCSN business functions by overseeing the evaluation and summary of privacy and security compliance data, audit information, and potential risks and remedies; identifying and reporting key compliance drivers, liabilities, and performance indicators (for example, adherence to standards, incorporation of new regulations) to HSCSN leadership, and CN leadership when applicable.
• Directs activities associated with continued regulatory compliance for multiple business functions by monitoring, interpreting, and designing strategy around regulatory changes; determining the impact of changes to the business; providing direction on implementation of changes throughout the business.
• Respond to privacy and security incidents, including conducting investigations and interviews; evaluate and recommend corrective action plans for substantiated allegations.  Coordinate and issue required notifications and regulatory reporting in consultation with the Children’s National Chief Compliance Officer and Children’s National Chief Security Officer.
• Conduct or oversee privacy and security periodic assessments, audits and reviews for HSCSN.  Establish risk mitigation plans and track remediation.
• Participate in third-party privacy/security risk assessments. Monitor vendor compliance and remediation of identified risks.
• Develop and deliver privacy and security training to HSCSN staff and provide guidance to drive to business needs.

The disclosed salary range includes the minimum and maximum rates within which Children’s National believes an individual’s base pay rate will fall for this position. It is not typical for an individual to be hired at or near the maximum of the pay range. The exact pay rate for this position will be based on a variety of factors in alignment with the Children’s National compensation philosophy. These factors are legitimate and non-discriminatory including, but not limited to, the current market conditions; organizational needs; the individual’s combination of prior work experience, level of education, knowledge, skills, and other qualifications. Children’s National is committed to providing a fair and competitive total rewards package to each of our employees. This base salary range does not include our comprehensive benefits package or any additional compensation for which this position may be eligible.

Childrens National Hospital is an equal opportunity employer that evaluates qualified applicants without regard to race, color, national origin, religion, sex, age, marital status, disability, veteran status, sexual orientation, gender, identity, or other characteristics protected by law. The “Know Your Rights” poster is available here: and the pay transparency policy is available here: Know Your RightsPay Transparency Nondiscrimination Poster.

Please note that it is the policy of Children's National Hospital to ensure a “drug-free” work environment: a workplace free from the illegal use, possession or distribution of controlled substances (as defined in the Controlled Substances Act), or the misuse of legal substances, by all staff (management, employees and contractors). Though recreational and medical marijuana are now legal in the District of Columbia, Children's National and its affiliates maintain the right, in accordance with our policy, to enforce a drug-free workplace, including prohibiting recreational or prescribed marijuana.