Vice President, Chief Privacy Officer and Data Protection - Hybrid

About the position

The Vice President, Chief Privacy Officer and Data Protection for Option Care Health (OCH), including its subsidiaries, affiliated companies, and joint ventures, will oversee the strategy, development, and continuous improvement of Option Care Health's Privacy and Data Protection program to adhere to legal and regulatory requirements, the Company's Code of Business Conduct and Company policies and procedures. This individual will build a strategic and comprehensive Privacy and Data Protection program that defines, develops, maintains and implements policies and processes that enable consistent, effective privacy practices which minimize risk and ensure the confidentiality of protected health information (PHI) and other sensitive information while enabling business objectives. This role will partner with key stakeholders to implement privacy compliance programs and will closely collaborate with Information Security to ensure operational alignment between information security and privacy programs.

Responsibilities

• Develop a vision and strategic plan that will guide the direction of the Privacy and Data Protection program and align with the overall strategic initiatives of Option Care Health.
• Ensure that the OCH Privacy and Data Protection program includes the privacy components of HIPAA, state privacy laws and regulations, and other relevant privacy requirements.
• Work effectively and collaboratively with executive leadership, Information Security, and Compliance leaders to establish and maintain effective management and governance for the Privacy and Data Protection program.
• Assess the current state of privacy and data protection and identify potential vulnerabilities and opportunities for enhancements within the program.
• Review all system-related information security plans, risk and impact assessments to ensure alignment between security and privacy practices.
• Serve as a partner to the business to identify, document, and mitigate privacy risks arising from key business activities.
• Monitor changes in healthcare laws and regulations, assess the impact on the organization, and update privacy programs and policies accordingly.
• Lead and participate in privacy-related committees and serve as an expert resource.
• Develop and manage procedures for vetting and auditing vendors for compliance with privacy and data security policies.
• Lead the privacy incident and breach response processes including performing prompt and timely investigation.
• Develop privacy policies, procedures, training materials and other communications to increase employee understanding of company privacy policies.
• Work cross-functionally to ensure the organization has and maintains appropriate privacy and confidentiality consent.
• Manage the organization's records retention, storage and destruction program.
• Collaborate effectively with representatives of the U.S. Department of Health and Human Services' Office for Civil Rights during privacy incident response.
• Monitor advancements in emerging technologies to ensure compliance with privacy and data security obligations.
• Build, mentor, and develop a best-in-class privacy team.

Requirements

• At least 12 years of professional experience in privacy, data protection or related experience required.
• Bachelor's degree in business, health care administration or relevant field required.
• Proven experience designing and operating healthcare related privacy programs, including expertise with HIPAA.
• Demonstrated current working knowledge of other relevant and emerging privacy and data protection laws.
• Knowledge of data processing operations within healthcare.
• Demonstrated expertise acting as a representative of the company and interacting with senior level management.
• Experience at a fast-paced company, and successful management of projects.
• Excellent critical thinking and strong analytical skills.
• Excellent communication (written and verbal) and presentation skills.
• Proven ability to lead, motivate, influence and guide cross functional teams.

Nice-to-haves

• One or more of the following privacy or data protection related certification is preferred: CIPP, CIPM, HCISPP, CDP or CHPC.
• Preference for direct experience in home infusion services, pharmacy, provider settings and/or nursing.
• Experience with privacy incident management tools, such as RADAR or other governance, risk and compliance (GRC) software.

Benefits

• 401k
• Dental Insurance
• Disability Insurance
• Health Insurance
• Life Insurance
• Paid Time off
• Vision Insurance