COORDINATOR/HIPAA

Position Number: S-3380

Position Summary:

Under the direct supervision of the HIPAA Privacy Officer, this position contributes to the CMU HIPAA compliance program by coordinating program activities as well as maintaining complete and accurate record keeping of the activities to demonstrate compliance with state and federal HIPAA regulations. The HIPAA Coordinator provides support and coordination of program activities, including but not limited to: coordination and record keeping of governance meetings and activities such as policy reviews; assisting with access management and activity monitoring functions; assisting in carrying out the HIPAA training program; assisting with auditing functions for the ongoing HIPAA risk assessment program; and assisting the investigation of HIPAA incidents. The HIPAA Coordinator is also responsible for maintaining accurate and complete records for audit purposes and as per HIPAA record retention requirements. 

Required Qualifications:

Associates degree or an equivalent combination of education and experience that equates to two years. Three years of progressively responsible experience of a qualifying nature. Must be able to work with a high level of independence and a high degree of autonomy. Ability to determine priorities, maintain confidentiality and handle sensitive issues with self-initiative. Excellent computer skills, including Microsoft products such as Excel, Word, PowerPoint, and Teams. Excellent organizational skills and attention to detail including record keeping and filing system. Demonstrated ability to establish and maintain positive and productive interpersonal skills. Excellent verbal and written communication skills and the ability to apply technologies to enhance the effectiveness and efficiency of communication. Ability to handle multiple priorities in a fast-paced environment. Ability to perform the essential functions of the position with or without reasonable accommodation. 

Duties & Responsibilities:

Assists in assuring documentation of HIPAA compliance activities is completed and retained as per HIPAA retention regulations. Coordinates the activities of and retains documentation of the HIPAA governance program, including HIPAA Council, HIPAA Executive Steering Committee (ESC ), and policy reviews. Attends HIPAA ESC and HIPAA Council meetings as requested by the HIPAA Privacy Officer and ensures complete and accurate meeting minutes. Assists in planning, implementing, and coordinating the HIPAA training program including onboarding, ongoing, and annual HIPAA training materials and as recommended by and in coordination with others such as the HIPAA Security Officer for Security Awareness topics, hiring departments, and managers/supervisors of hybrid units. Helps to ensure compliance with the completion of HIPAA training, reporting delinquencies to managers and working with the HIPAA Privacy Officer/delegate and managers to ensure follow through of sanctions for violations of HIPAA training requirements. Helps to coordinate and maintain the master HIPAA training plan and calendar. Oversees the maintenance and retention of the library of training materials. Assists the HIPAA Privacy Officer in preparing the annual training report and databases including but not limited to training, sanctions, incidents/breaches, policy reviews, and other applicable HIPAA compliance metrics. Assists the HIPAA Privacy Officer with the process for investigating a HIPAA incident and coordinating and retaining the documentation of incidents/breaches. Assists in coordinating the ongoing risk assessments for each HIPAA hybrid unit and follows up as directed by the HIPAA Privacy Officer or delegate. Assists with auditing functions for the ongoing HIPAA risk assessment program Assists in the retention of Business Associate A