Job Description:

The Director HIPAA Compliance will ensure that the organization complies with all privacy laws and regulations while safeguarding sensitive information. They will also ensure that any privacy violations are fully investigated, and appropriate reports are delivered to internal and external stakeholders in a timely manner. They will also develop and implement educational programs for clients and employees while fostering a culture of trust and transparency in how protected health information is handled.

Essential Job Functions:

• Ensures that all Sharecare policies and procedures regarding Release of Information (ROI) are being accurately maintained and organized and calls for changes when they need to be made. When changes are required, the compliance officer ensures that the appropriate changes are made and are made in a timely fashion.

• Along with Security Officer, conducts audits of security and privacy systems to ensure that we remain in compliance with all governing laws and regulations including, but not limited to, federal and state regulations, and HIPAA, HITECH and Omnibus as they pertain to our role as a Business Associate of multiple Covered Entities.

• Act as a resource to answer compliance questions/issues from Sharecare field staff

• Oversees the investigation and documentation of all privacy and security incidents

• Oversees all required training for Sharecare personnel including annual HIPAA training, biannual CRIS certification, new policy and procedure training regarding privacy and security

• Actively participates in local Health Information Association and/or other similar organizations

• Conducts seminars/webinars for clients and potential clients regarding topics such as HIPAA, HITECH, Meaningful Use, internal auditing, etc.

• Oversees any Sharecare-wide audit and compliance programs

• Participates in Sharecare project teams as needed

• Write internal training briefs on privacy and compliance issues

Qualifications:

• Must have experience with or expertise in the following:

• HIPAA/HITECH/Omnibus Final Rule

• Office for Civil Rights guidance and processes

• Federal rules and regulations regarding ROI plus an understanding of state rules and regulations and their implications in the states where Sharecare operates

• Preparing and conducting audits of privacy and security policies and procedures

• Public Speaking

• Compliance Training Program implementation and oversight

• RHIA, CHPC or equivalent

• Minimum of 10 years experience in HIM or related field

• Excellent written and verbal communication skills

• Ability to prepare, submit and conduct presentations for employees and/or clients

• Well-versed in current EHR technology usage with hands on experience with systems such as Epic, Allscripts, Cerner, Nextgen or similar a plus

• Proven ability to write comprehensive policy and procedure documents

• Capacity to interact successfully with all levels of the organization

• Excellent Microsoft Office skills

Sharecare and its subsidiaries are Equal Opportunity Employers and E-Verify users. Qualified applicants will receive consideration for employment without regard to race, color, sex, national origin, sexual orientation, gender identity, religion, age, equal pay, disability, genetic information, protected veteran status, or other status protected under applicable law.

Sharecare is an Equal Opportunity Employer and doesn't discriminate on the basis of race, color, sex, national origin, sexual orientation, gender identity, religion, age, disability, genetic information, protected veteran status,or other non-merit factor.