Location: Chicago, Illinois

Hospital: Rush University Medical Center

Department: RUSH Privacy

Work Type: Full Time

Work Schedule: 8 Hr (8:00 AM - 4:00 PM)

Pay Range: $32.00 - $46.44 per hour
Rush salaries are determined by many factors including, but not limited to, education, job-related experience and skills, as well as internal equity and industry specific market data. The pay range for each role reflects Rush's anticipated wage or salary reasonably expected to be offered for the position. Offers may vary depending on the circumstances of each case. This role has a corresponding incentive plan based on multiple factors. incentive compensation and additional benefits can be found on our Rush benefits page (https://www.rush.edu/rush-careers/employee-benefits)

Summary:
Provides project support to HIPAA Privacy and Security efforts of the Corporate Compliance Department supporting both all system locations. Provides data reporting and analysis of Privacy Office activities for internal and executive reporting. Serves as the lead auditor of access to ePHI throughout the enterprise, to include administration of an automated access auditing capability. Implements technology, including database design, for the tracking of HIPAA privacy and security activities and reports on metrics. Conducts analysis of risk through assessment activities for HIPAA Privacy and Security, including EOC rounds. Provides administrative support to the department and coordinates with other departments and activities, as needed. Exemplifies the Rush mission, vision and values and acts in accordance with Rush policies and procedures.

Other information:
Required Job Qualifications:
• Bachelor's degree in related area or an equivalent combination of education and experience.
• Four years of experience in healthcare privacy or health information management related field.
• Intermediate Microsoft Excel, Access, SharePoint, and Word skills.
• Strong skills in communication, project/time management and prioritization/organization.
• Must be able to work effectively with individuals at all levels in the organization.

Preferred Job Qualifications:
• Master's degree.

Physical Demands:

Competencies:

Disclaimer: The above is intended to describe the general content of and requirements for the performance of this job. It is not to be construed as an exhaustive statement of duties, responsibilities or requirements.

Responsibilities:
1. Prepares data flow diagrams to support the analysis of privacy and security projects.
2. Conducts analysis of data and prepares charts to determine trends regarding privacy and security risks.
3. Creates reports to support metrics, projects and information analysis.
4. Designs and conducts audits of access to the electronic health record (EHR), analyzes results, and identifies possible instances of inappropriate access or use of the HER.
5. Administers an enterprise-wide application capable of auditing access to applications processing ePHI enterprise-wide.
6. Administers a rotating schedule of audits to ensure a complete cycle of for cause and not-for-cause audits are accomplished.
7. Designs and implements databases using Microsoft Access and other database tools. Develops the means to create automated reports that provide metrics of operational effectiveness.
8. Administers software and databases for the office, including those built on Access, Excel, and outsourced/portal-based, as assigned.
9. Coordinates the intake and reporting of Hotline reports under the supervision of the Privacy Director.
10. Maintains the Privacy Office intranet site, including posting of files and creating linked content through Sharepoint.
11. Maintains technical equipment for the office and interfaces with Information Services, when needed.
12. Supports the conduct of HIPAA risk assessments by collecting and reporting information using prepared checklists, as needed.
13. Conducts privacy and security rounding as needed .
14. Provides support to HIPAA privacy and security incident response and analysis as directed.
15. Prepare and send privacy forms to patients, as needed.
16. Performs administrative functions (filing, mailing, mail, etc.) of the Privacy Office.
17. Performs process improvement activities.
18. Interfaces with other support functions within the institution (e.g., Information Services or Medical Center Engineering) for equipment or service requests.
19. Other duties as assigned.