HIPAA Program Manager

Experience Required:4 years of experience on privacy requirements in healthcare settings and healthcare industry operations, including: HIPAA policy development and governance, HIPAA compliance monitoring, privacy impact assessments (PIAs) and HIPAA risk assessments, third party vendor risk assessments, HIPAA compliance audits, and training.3 years of experience leading or managing HIPAA compliance implementation projects or transitioning an organization into HIPAA-covered entity status.3 years of experience working directly with IT teams on HIPAA Security Rule safeguards, including access control models, audit logging, encryption, retention models, and cloud-based data governance.2 years of experience developing or enforcing data retention schedules, PHI lifecycle governance, or data archiving strategies (e.g., “hot” vs. “cold” storage models).3 years of experience coordinating HIPAA or data privacy work across multiple divisions (e.g., Legal, IT, Fiscal, Contracts, Program Operations) and preparing executive-level briefings.3 years of experience operationalizing HIPAA policies into SOPs, workflows, staff procedures, and implementation guides.3 years of experience conducting HIPAA risk assessments, Privacy Impact Assessments (PIAs), threat modeling, or HIPAA audit readiness assessments.3 years of experience managing HIPAA incident response investigations, performing root-cause analysis, and applying federal and breach laws.2 years of experience reviewing, negotiating, or operationalizing HIPAA-related Business Associate Agreements (BAAs), Data Exchange Agreements (DEPAs), or third-party HIPAA vendor risk assessments.2 years of experience developing or delivering HIPAA or privacy-focused training to staff, managers, contractors, or providers.2 years of experience managing multi-phase compliance or regulatory projects using GANTT charts or other structured project-management toolsEducation Required:Bachelor’s degree or higher. An advanced degree, including a Master’s in Business or Healthcare Administration, Master of Laws (LL.M), or Juris Doctor, may be substituted for two (2) years towards the minimum of years of experience.Certification in one or more of the following:Certified in Healthcare Compliance (CHC).Certified in Healthcare Privacy Compliance (CHPC).Certified Information Privacy Professional/United States (CIPP/US).Certified Information Privacy Manager (CIPM) certification.