Privacy Officer

About Navia Benefit Solutions

Navia Benefit Solutions is a people-focused benefit administrator that thrives on a dynamic team of innovative, problem-solving professionals dedicated to enhancing participant and client experiences. Their mission centers on improving lives and simplifying the benefits journey. If you are passionate about delivering outstanding service, pioneering benefits administration, and engaging in an inclusive workplace, this role is an excellent fit.

Job Overview

We are looking for an experienced Privacy Officer to join our team to ensure adherence to the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule, as well as applicable federal and state privacy regulations. Responsibilities include crafting, executing, and supervising privacy policies to protect protected health information (PHI) and personally identifiable information (PII), ensuring confidentiality across the organization. This role will be the primary contact for privacy compliance questions, training programs, audits, and privacy incident guidance, closely collaborating with the Fraud Team responsible for incident intake, coordination, and management.

Key Responsibilities

• Provide expert support in handling privacy-related incidents, advising on obligations, regulations, documentation, and breach notifications, while the Fraud Team manages the overall incident coordination.
• Collaborate with the Fraud Team to contribute privacy-specific input regarding communications, corrective measures, process updates, regulatory notifications, and documentation for incidents involving PHI, PII, or similar privacy concerns.
• Develop and maintain procedures for privacy incidents, including breach notifications, investigation protocols, and corrective actions aligned with the Fraud Team’s incident response methods.
• Design and enforce comprehensive privacy policies in line with federal laws and industry standards.
• Develop and deliver regular employee training to promote awareness of privacy regulations and responsibilities.
• Monitor compliance with privacy standards across the organization, ensuring secure handling, storage, and transmission of PHI.
• Execute periodic assessments to identify vulnerabilities in the management of PHI and implement strategies to mitigate risks.
• Lead and coordinate internal privacy audits and collaborate with external auditors as necessary.
• Conduct data impact assessments to identify and minimize risks related to processing personal data and contribute to the organization's risk assessments under SOC protocols.
• Continuously evaluate and improve the organization's privacy framework and initiatives.
• Act as the primary liaison with regulatory bodies, legal advisers, clients, and other stakeholders on privacy-related compliance matters.
• Maintain up-to-date knowledge of regulatory changes, trends, and best practices in healthcare privacy and security.

Work Environment

Candidates located within 30 miles of one of Navia's four office locations may be required to work in a hybrid schedule. Eligible applicants should be residents of AZ, CA, CO, FL, GA, IA, IL, IN, KS, MA, ME, MI, MN, MO, MT, NC, ND, NE, NJ, NV, NY, OH, OR, PA, SD, TN, TX, UT, and WA.

Why Choose Navia?

• Make a significant impact supporting employers and their employees nationwide.
• Advance your career in a culture committed to excellence and innovation.
• Join a workplace valuing collaboration, creativity, and customer-focused solutions.

Compensation and Benefits

• Competitive annual salary ranging from $80,000 to $100,000
• Comprehensive health benefits
• Wellness programs sponsored by the company
• Free Life Insurance and Long-Term Disability coverage
• Paid time off including six holidays plus two floating holidays
• Flexible work arrangements including work-from-home and hybrid schedules

Candidate Requirements

• Bachelor’s degree in healthcare administration, business administration, information technology, or a related discipline; Master’s degree preferred
• Certifications such as Certified in Healthcare Privacy Compliance (CHPC) or Certified Information Privacy Professional (CIPP) are advantageous
• At least five years of professional experience in healthcare compliance, privacy, or a related area
• Comprehensive understanding of HIPAA's Privacy, Security, and Breach Notification Rules
• Familiarity with applicable state privacy laws
• Strong analytical and problem-solving capabilities with the ability to interpret and apply complex regulations
• Excellent communication skills and ability to train personnel at various organizational levels
• Proven leadership experience in managing privacy programs and facilitating organizational change
• High ethical standards, discretion, and dedication to safeguarding patient confidentiality