Job details
Job type full-time
Full job description
Job description:
The company:
Coalition security group – the coalition security group is a managed security services provider for the jonas software business unitsThe coalition security group provides services that include security architecture and engineering, saas application security, identity & access management, security risk assessments, bc/dr and regulatory compliance services.
The position
The compliance officer is responsible for the organization`s privacy and compliance programs including but not limited to daily operations of the program, development, implementation, and maintenance of policies and procedures, monitoring program compliance, investigation and tracking of incidents and breaches and insuring individual rights in compliance with federal and state laws.
Job responsibilities:
Builds a strategic and comprehensive privacy program that defines, develops, maintains and implements policies and processes that enable consistent, effective privacy practices that minimize risk and ensure the confidentiality of protected health information (phi), paper and/or electronic, across all media typesEnsures privacy forms, policies, standards, and procedures are up to date.
Works with organization ciso, senior management and legal team to establish governance for the compliance program.
Serves in a leadership role for privacy and compliance.
Work with ciso to ensure alignment between security and privacy compliance programs including policies, practices, investigations, and acts as a liaison to the information technology teams.
Support ongoing process to track, investigate and report inappropriate access and disclosure of protected health informationMonitor patterns of inappropriate access and/or disclosure of sensitive information.
Performs initial and periodic information privacy risk assessment/analysis, mitigation and remediation.
Conducts related ongoing compliance monitoring activities in coordination with the organization`s other compliance and operational assessment functions.
Ensure the organization has and maintains appropriate privacy and confidentiality consents, authorization forms and information notices and materials reflecting current organization and legal practices and requirements.
Participates in development and delivery of initial and ongoing privacy training to the workforce.
Participates in the development, implementation, and ongoing compliance monitoring of all business associates and business associate agreements, to ensure all privacy concerns, requirements, and responsibilities are addressed.
Works with the ciso and other applicable organization units in coordinating client rights to inspect, amend, and restrict access to protected health information when appropriate.
Coordinates required breach determination with ciso and legal and supports the notification processes under hipaa and applicable state breach rules and requirements.
Supports and administers a process for investigating and acting on privacy and security complaints.
Performs required breach risk assessment, documentation, and mitigationWorks with human resources to ensure consistent application of sanctions for privacy violations.
Maintains current knowledge of applicable federal and state privacy laws and accreditation standards.
Works with organization administration, legal counsel, and other related parties to represent the organization`s information privacy interests with external parties (state or local government bodies) who undertake to adopt or amend privacy legislation, regulation, or standard.
Cooperates with the u.sDepartment of health and human service`s office for civil rights, state regulators and/or other legal entities in any compliance reviews or investigations.
Serves as information privacy resource to the organization regarding release of information and to all constituents.
Job qualifications:
Bachelors degree in health information management or a related healthcare field.
10 years of experience with knowledge of state and federal information privacy laws, including but not limited to hipaa, pci, gdpr, and ccpa.
Demonstrated knowledge of the security & privacy standards such as pci-dss, iso27001, hitrust, nist 800-53, etc.
Demonstrated organization, facilitation, written and oral communication, and presentation skills.
Recommended privacy certification such as certified in healthcare privacy and security (chps) and/or other healthcare industry related credential, e.gRhia, rhit.
Business unit:
Coalition security
Scheduled weekly hours:
40
Worker type:
Regular
More about jonas software:
Jonas software is the leading provider of enterprise management software solutions to the country and golf clubs, foodservice, construction, fitness & sports, attractions, salon & spa, education, radiology/laboratory information systems, and product licensing industriesWithin these vertical markets, jonas is made up of over 65 distinct brands, which are respected and leaders within their own domain.
Jonas’ vision is to be the branded global leader across the aforementioned vertical markets and to be recognized by customers and respective industry stakeholders as the trusted provider of ‘software for life’ and as an ambassador for technology, product innovation, quality, and customer service.
Jonas software is the valued technology partner of over 60,000 customers worldwide in more than 30 countriesJonas employs over 2,000 skilled individuals consisting of a cross-section of industry experts and technology professionalsJonas is headquartered in canada and also operates offices throughout north america, the united kingdom, europe, australia new zealand and africaJonas is a 100% owned subsidiary of constellation software inc., headquartered in toronto and traded on the s&p/tsx 60.
