Hippa Compliance Manager/It Security & Compliance Specialist Ii-Wake County

The HIPAA Compliance Manager, working within Comprehensive Health Services, will routinely collaborate with the Department of Information Technology, Healthcare Records Administrator and Quality Assurance Manager as it pertains to paper and electronic offender health records, the maintenance and enhancement of the electronic Healthcare Electronic Records for Offenders (HERO) system, oversight of the integration of HERO into the Health Information Exchange (HIE), management of department providers to access offender health data though the HIE, and HIPAA compliance. The description of work is explained in detail below:

HIPAA Compliance:

• Develop, implement, and oversee policies and procedures to ensure HIPAA compliance.

• Conduct regular training sessions for staff on HIPAA regulations and the importance of PHI privacy and security.

• Monitor and audit compliance with HIPAA regulations and internal policies.

• Investigate and respond to incidents involving PHI breaches or potential non-compliance.

Privacy and Security:

• Implement and maintain privacy and security policies in line with federal and state regulations.

• Oversee the secure handling, storage, and transmission of PHI.

• Ensure that all PHI access is appropriately authorized and monitored.

• Conduct regular risk assessments and audits to identify vulnerabilities and ensure data protection.

Collaboration with Cybersecurity:

• Work closely with the IT and Cybersecurity teams to implement technical safeguards for PHI.

• Participate in the development and execution of cybersecurity strategies to protect PHI from cyber threats.

• Assist in the management of security incidents involving PHI, including breach notification and remediation efforts.

• Ensure that all electronic PHI (ePHI) is protected by appropriate encryption and access controls.

Training and Awareness:

• Develop and deliver training programs on HIPAA, privacy, and cybersecurity best practices.

• Raise awareness about the importance of PHI security across the department.

• Provide guidance and support to staff on HIPAA-related issues and queries.

Documentation and Reporting:

• Maintain comprehensive documentation of HIPAA compliance efforts, risk assessments, and incident responses.

• Prepare regular reports on HIPAA compliance status and activities for senior management.

• Ensure timely reporting of PHI breaches to regulatory authorities as required.

Continuous Improvement:

• Stay current with changes in HIPAA regulations and cybersecurity trends.

• Recommend and implement improvements to existing policies and procedures to enhance PHI protection.

• Engage in ongoing professional development to maintain expertise in HIPAA compliance and cybersecurity.

This is a full-time position (40 hours per week) with State Benefits.

NC Department of Adult Correction (DAC):

The Dept. of Adult Correction is responsible for the care, custody and supervision of all adults sentenced after conviction for violating North Carolina laws.  This department includes State Prisons with custody, healthcare and facility operations staff as well as the division of Community Supervision.  Other divisions include Administration, Compliance & Accreditation, Comprehensive Health Services, Internal Affairs & Intelligence Operations, Post-Release Supervision & Parole Commission and Rehabilitation & Reentry.

The Knowledge, Skills and Abilities listed below, along with the Minimum Education and Experience requirements, are REQUIRED to qualify for this position.  We will not review resumes in lieu of Experience and Education listed on the application.

To qualify for this position, applicants must document on the application that they possess the following:

• Demonstrate knowledge of federal and state laws related to healthcare privacy and secure.

• Demonstrated awareness of cybersecurity threats and best practices for safeguarding electronic protected health information (ePHI).

• Demonstrated proficiency in using compliance management software and tools.

• Demonstrated basic understanding of IT systems and cybersecurity tools used to protect PHI.

Policy Development:

• Demonstrated ability to develop, implement, and oversee policies and procedures that ensure HIPAA compliance.

• Demonstrated capacity to create and update comprehensive documentation for compliance activities and incident reports.

Management Preference:

• Certified HIPAA Privacy Security Expert (CHPSE) preferred.

Bachelor's degree in computer science or a related IT field or closely related field from an appropriately accredited institution and two years of progressive experience in IT Security or closely related area; or Associate degree in computer science or a related IT field or closely related field from an appropriately accredited institution and three years of progressive experience in IT security or closely related area; or an equivalent combination of education and experience.The North Carolina Department of Adult Correction (DAC) is an Equal Opportunity Employer that embraces an Employment First philosophy which consists of complying with all federal laws, state laws, and Executive Orders.  We are committed to reviewing requests for reasonable accommodation at any time during the hiring process or while on the job.

DAC uses the Merit-Based Recruitment and Selection Plan to fill positions subject to the State Human Resources Act with the most qualified individuals. Hiring salary will be based on relevant qualifications, internal equity, and budgetary considerations pertinent to the advertised position.

It is critical to our screening and salary determination process that applications contain comprehensive information.  Information should be provided in the appropriate areas to include the beginning and ending dates of jobs worked, education with the date graduated, all work experience, and certificates/licenses.  Resumes will not be accepted in lieu of completing this application.  Answers to Supplemental Questions must refer to the education or work experience listed on this application to receive credit.  Degrees must be received from appropriately accredited institutions.

• Applicants seeking Veteran's Preference must attach a DD-214 Member-4 Form (Certificate of Release or Discharge from Active Duty) to their applications.

• Applicants seeking National Guard Preference must attach a NGB 23A (RPAS) if they are a current member of the NC National Guard in good standing.  If a former member of the NC National Guard who served for at least 6 years and was discharged under honorable conditions, they must attach either a DD256 or NGB 22.

• If applicants earned college credit hours but did not complete a degree program, they must attach an unofficial transcript to each application to receive credit for this education.

• If applying for a position certified through the NC Dept. of Justice - Criminal Justice Standards Division, click this link for specific certification requirements:  Correctional & Probation/Parole Officer Certification.

• The NC Dept. of Adult Correction must adhere to the US Dept. of Justice Final Rule on the "National Standards to Prevent, Detect, and Respond to Prison Rape."  Click this link for information on hiring and promotion prohibition requirements for all positions in the NC Dept. of Adult Correction: PREA Hiring and Promotion Prohibitions (Download PDF reader) (Download PDF reader).

Due to the volume of applications received, we are unable to provide information regarding the status of your application over the phone. To check the status of your application, please log in to your account and click "Application Status."  If you are selected for an interview, you will be contacted by management.  If you are no longer under consideration, you will receive an email notification.

For technical issues with your application, please call the GovernmentJobs.com Applicant Support Help Line at 855-524-5627.  If there are any questions about this posting other than your application status, please contact Kelly Snead @ kelly.snead@dac.nc.gov or 984-255-6027.