Empower Every New Yorker - Without Exception - to Live the Healthiest Life Possible

NYC Health + Hospitals is the largest public health care system in the United States. We provide essential outpatient, inpatient and home-based services to more than one million New Yorkers every year across the city's five boroughs. Our large health system consists of ambulatory centers, acute care centers, post-acute care/long-term care, rehabilitation programs, Home Care, and Correctional Health Services. Our diverse workforce is uniquely focused on empowering New Yorkers, without exception, to live the healthiest life possible.

At NYC Health + Hospitals, our mission is to deliver high quality care health services, without exception. Every employee takes a person-centered approach that exemplifies the ICARE values (Integrity, Compassion, Accountability, Respect, and Excellence) through empathic communication and partnerships between all persons.

Job Description

Summary Of Essential Duties and Responsibilities:
The Associate Privacy Officer ("APO") under the direction and guidance of the Chief Corporate Compliance Officer ("CCO"), or other designated supervising Compliance personnel, will engage in activities within the Office of Corporate Compliance ("OCC") to enhance the OCC's compliance with Federal and state regulatory and statutory patient privacy requirements, including but not limited to, the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"). In conjunction with the other Compliance and Privacy Officers, the APO will develop, implement, monitor, and revise policies, procedures, and related systems that facilitate the attainment of compliance with such regulatory and statutory requirements.

General tasks and responsibilities will include:
• Assisting the CCO with reviewing and revising, as necessary, the OCC's HIPAA Operating Procedures and policies
• Researching privacy issues for the CCO as needed
• Assisting the Compliance and Privacy Officers with creating activities and plans for the annual Corporate Compliance and Ethics Week
• Assisting the CCO with creating and/or updating the annual HIPAA trainings, as well as targeted trainings issued by the OCC, including creating training videos and tip sheets
• Attending biweekly OCC Team Meetings
• Assisting Compliance and Privacy Officers with complex investigations of potential HIPAA violations and/or breaches
• Conducting investigations of potential HIPAA violations and/or breaches resulting from inappropriate access to or disclosure of patients' protected health information by workforce members
• Drafting breach notification letters to patients whose protected health information has been compromised
• Assisting Compliance and Privacy Officers with uploading documents to case files database for privacy cases
• Assisting Compliance and Privacy Officers with collecting documents and other evidence related to the annual HIPAA Risk Analysis
• Responding to emails in the CPO@nychhc.org inbox related to patient privacy issues
• Reporting all HIPAA breaches to the Office for Civil Rights and the State Attorney General
• Assisting the CCO with responses to HIPAA investigations by oversight agencies
• Completing other compliance-related tasks for the OCC as necessary from time to time

Minimum Qualifications
1. A Master's degree from an accredited college or university in Healthcare, Hospital, Public or Business Administration, Industrial/Organizational Psychology, Organizational Behavior or a related discipline and three (3) years of full-time experience planning, developing and monitoring programs, systems and/or procedures in support of administrative management initiatives, one (1) year of which must have been in a responsible managerial or supervisory capacity; or
2. A Baccalaureate degree from an accredited college or university in disciplines, as listed in "1" above and four (4) years of full-time experience, as outlined in "1" above, two (2) years of which must have been in a responsible managerial or supervisory capacity; or
3. A satisfactory equivalent combination of education, training and/or experience.

Department Preferences

• A Master's Degree, from an accredited college or university, in Health Care, Hospital, or Public Administration, or another approved related field, and one (1) year of progressively responsible experience in patient privacy requirements, including HIPAA; or Baccalaureate Degree, from an accredited college or university, in Health Care, Hospital or Public Administration, or another approved related field, and two (2) years of experience as described above.
• Knowledge of Federal and state privacy laws and regulations, including but not limited to HIPAA
• Excellent writing skills
• Excellent communication skills
• Excellent research skills
• Excellent organizational skills
• Experience conducting investigations, including gathering evidence and conducting interviews
• Proficient in Word, Excel, PowerPoint, and Adobe

If applying online, please include your cover letter in the same file attachment with your uploaded resume.

NYC Health and Hospitals offers a competitive benefits package that includes:

• Comprehensive Health Benefits for employees hired to work 20+ hrs. per week
• Retirement Savings and Pension Plans
• Loan Forgiveness Programs for eligible employees
• Paid Holidays and Vacation in accordance with employees' Collectively bargained contracts
• College tuition discounts and professional development opportunities
• Multiple employee discounts programs