Management Analyst III (HIPAA)

Nationwide IT Services

4d•Remote

About The Position

Nationwide IT Services is seeking a Management Analyst III (HIPAA) to support the Department of Health and Human Services (HHS), Office of Civil Rights (OCR). The candidate will provide mission support services for policy analysis and provide recommendations and advice regarding the development and implementation of OCR’s mission. The Office for Civil Rights (OCR), a staff division at the HHS Office of the Secretary, ensures that individuals receiving services from HHS-funded programs are not subject to unlawful discrimination, that civil rights laws promote health equity in HHS, funded and administered by HHS to the extent possible, requires that regulated entities comply with applicable privacy and security requirements promulgated under HIPAA and HITECH, and individuals can exercise their rights to access their health information and can trust in the privacy and security of their health information. OCR carries out the HHS mission of improving the health and well-being of all Americans and providing essential human services. By promoting health equity and protecting the right of individuals to access their health information while protecting the privacy and security of this information, OCR helps empower people’s health care decision-making and helps ensure the integrity of the health care system, both of which promote better health outcomes for the Nation.

Requirements

Minimum educational experience is a master’s degree from an accredited university with a focus on Cybersecurity, Computer Science, Information Sciences, or other comparable fields of study, plus three years of specialized experience with Cybersecurity equivalent to the GS-13/14 level in the Federal Government.
Must have an expert understanding and implementation of HIPAA policies.
Ability to obtain and retain a Public Trust clearance level II.
Ability to work well with a team in a high-visibility, fast-paced environment.
Must be flexible in balancing competing and new priorities with strong analytic communication and writing skills.
Understanding of the public health or healthcare system/field.
A combination of education and experience may be used to qualify for this position. Experience must be equivalent to at least four years of specialized experience equivalent to the GS-13/14 level in the Federal Government.

Nice To Haves

Preference will be given to candidates with relevant industry certifications from CISSP, CISM, CIPP/CIPT/CIPT.

Responsibilities

Provides advice on mission support issues of policy, impact of administrative rules, compliance, and enforcement mechanisms related to OCR’s HIPAA Privacy and Security Rules and Cybersecurity initiative.
Provides recommendations regarding improving the quality and efficiencies of OCR’s HIPAA and Cybersecurity projects, activities, and mission. Coordinates with OCR leaders to evaluate program efficiencies, identify areas of overlap, and provides recommendations for improvements and/or consolidation of workstreams.
Provides project management and develops and implements processes to improve OCR’s HIPAA and Cybersecurity initiatives for compliance and enforcement authorities regarding case investigations, conduct of compliance reviews, and case resolution and enforcement strategies concerning Health and Human Services divisions, State and local governments, and private entities.
Provides mission support, policy, and regulatory analysis on OCR’s HIPAA and Cybersecurity initiatives to the OCR Director and Deputy Directors on issues of policy, impact of administrative rules, compliance, and enforcement mechanisms.
Provides input for OCR’s HIPAA and Cybersecurity initiatives on the implementation of policies and procedures under OCR’s compliance and enforcement authorities.
Provides high-quality research and analysis for OCR’s HIPAA and Cybersecurity initiatives by processing and investigating cases, conducting compliance reviews in support of OCR’s nationwide goals.
Supports OCR officials’ intra- and inter-agency efforts regarding OCR’s HIPAA and Cybersecurity initiatives to develop, coordinate and implement mission activities.
Interfaces with appropriate governmental staff as well as federal and state agencies and other regulated entities, complainants, covered entities and business associates, advocacy groups, and other stakeholders as required.
Provides outreach activities on OCR’s HIPAA and Cybersecurity initiatives such as outreach to stakeholders, media relations, and special initiatives to maximize the impact of OCR’s mission activities, program goals, and strategic objectives.