Public Health HIPAA Security Consultant

**Please email your resume in word format.**

 

OBJECTIVE

 

To obtain a consultant in order to assist Public Health Information Systems (PHIS) comply with the provisions of the Health Insurance Portability and Accountability Act of 1996 (HIPAA). 

 



SCOPE

 

The scope of this work may include, but not be limited to:

 ? Act as a consultant to the Division?s CIO and in the review of HIPAA security policies, computer operations, access controls, system development, and data communications security.? Provide direction to divisional management regarding strategic and tactical plans related to the organization?s HIPAA security controls.? Participate on project teams focusing on security for infrastructure systems (such as Supervisory Control and Data Acquisition) and collaborate with the Emergency Operations Center and business units (divisions) regarding the business continuity plan to ensure HIPAA security issues are addressed.? Provide technical, regulatory, and policy leadership in the areas of PC and network security by ensuring the Division complies with the HIPAA security rule, through knowledge of security law and best practices.? Establish and implement work processes and procedures to ensure the Division is compliant with HIPAA rules and policies.? Access the Division?s current Security infrastructure and security policies.? Act as the central point of contact for HIPAA security related issues. ? Represent Public Health on the County HIPAA Task Force? Represent Public Health on the DHS Information Security Policy Workgroup? Represent Public Health on the County Cyber-Terrorism Security Policies team? Champion for overall vision, providing program guidance

? Initiate a HIPAA compliance GAP analysis for PH.

 

MINIMUM QUALIFICATIONS

 

The candidate must possess a high degree of HIPAA and information technology knowledge and also be familiar with health services business processes.  The candidate must meet all of the following minimum qualifications:

 A degree in Computer Information Systems Auditing, Computer Science, Business Administration, Public Health Administration or a related field. Documentary evidence of this degree must be presented, if called to be interviewed.

 Two (2) years experience within the last four (4) years in auditing and evaluating healthcare organizations? information technology compliance with HIPAA security regulations.

 Two (2) years experience within the last four (4) years in performing HIPAA security GAP analysis for a healthcare organization.

 Two (2) years experience within the last four (4) years in developing HIPAA security compliance implementation plans for a healthcare organization.

 Two (2) years experience within the last four (4) years in developing policies and procedures for HIPAA security compliance for a healthcare organization.

 Two (2) years experience within the last four (4) years developing and managing the utilization of event logs (i.e.: user logon reports, user logoff reports, logon failure reports, and audit log access reports) documenting HIPAA security compliance for a healthcare organization.

 Two (2) years experience within last four (4) years coordinating and monitoring the implementation HIPAA security compliance plans.

 

IMPORTANT:

Resumes submitted must be clear and concise with evidence that applicant meets all qualifications specified. Resumes submitted must include specific date of commencement and completion of all relevant work experience.  Candidates are advised that references will be verified.  Contact person?s name and phone number must be current. 

 

If selected for interview, the candidate must provide:

 

1.  Sample of his/her HIPAA security compliance GAP analysis performed for a prior healthcare organization.

2.  Sample of his/her HIPAA Security Compliance implementation action plan developed for a prior healthcare organization.

a.  Written description of his/her coordination efforts of HIPAA security compliance activities performed for a prior information technology environment.