JOB SUMMARY:Under the supervision of the Director of Operations, the Contracts & Compliance Manager is responsible to monitor and manage contract administration and compliance policies, processes, and procedures including document management, review, and submission to ensure documents are properly prepared, reviewed, started, and submitted in a timely manner. In addition, the Contracts and Compliance office serves as the agencies HIPAA Privacy and Security Officer.

ESSENTIAL DUTIES AND RESPONSIBILITIES:

• Maintains agency contract database and ensures timely preparation, review and submission of agency and program related contracts.
• Coordinate with program leaders to track contractual obligations and trigger events, draft correspondence, and respond to contractual inquiries.
• Assist in contract review and coordination of approvals for executing agreements.
• Serves as agency’s HIPAA Privacy and Security Officer, creates, and maintains related policies and procedures per applicable laws and regulations.
• Ensures privacy forms, policies, standards, and procedures are up to date.
• Establishes an ongoing process to track, investigate, and report inappropriate access and disclosure of protected health information. Monitors inappropriate access and/or disclosure of protected health information.
• Maintains confidentiality of all records and information.
• Provides training and educational resources to staff and management on HIPAA and the agency’s specific Privacy & Security Policies.
• Evaluate and assess risks associated with third party vendors, contractors, and business partners to ensure the organization’s interests are protected.
• Participates in the development, implementation, and ongoing compliance monitoring of all business associates and business associate agreements, to ensure all privacy concerns, requirements, and responsibilities are addressed.
• Supports the Information Services (IS) Coordinator to perform risk and security assessments of applications, databases, and servers and help network technologies, such as routers, switches, and access points to identify, evaluate and prioritize risks and investigates incidents.
• Performs periodic security audits of all computer systems and networks as well as conducts annual HIPAA Risk Assessments.
• Responds to actual or suspected breaches of the confidentiality or integrity of PHI and ePHI.
• Accountable for overall access control risk management including auditing current access controls to identify potential risks, making recommendations for improvement in security and tracking remediation.
• Collaborates with the IS Coordinator to develop and update Information Systems crisis response plans to effectively manage and mitigate the impact of unexpected events or emergencies.
• Maintains current knowledge of applicable federal and state privacy laws and accreditation standards.
• Prepares regular reports for the Director of Operations summarizing Information Systems risk findings, mitigation efforts, and recommends appropriate actions.
• Travels occasionally between various facilities to provide support for alternate HSRC locations as needed.
• Availability to accept after hours calls or complete after-hours site visits in urgent and emergency situations.
• Acts in a manner consistent with agency values.
• Performs additional duties as assigned.

EDUCATION &/or EXPERIENCE:

• High school diploma or GED equivalent required.
• Associate Degree in Healthcare Administration, Business Administration, Health Information Management, or related discipline required.
• Bachelor Degree in Healthcare Administration, Health Information Management, Business Administration, or related discipline preferred.
• Previous experience administering HIPAA, Risk Management, or contracting required.
• Experience within health care required.

LICENSES OR CERTIFICATES:

• Valid California Driver’s License, and personal auto liability insurance required. Must have a personal vehicle in good driving/operating condition, insured for State minimum liability requirements, and that can be used for the applicable job functions noted above.
• Certified HIPAA Professional (CHP) within six (6) months of hire

PRE-SCREENING REQUIREMENTS:

• Requires clearance of a DOJ and FBI criminal history background check
• Pre-employment physical and PPD skin test.
• Requires Motor Vehicle Report verification.
• COVID-19 and Influenza (flu) vaccines preferred.

JOB SKILLS:

• Ability to work well both independently and with others in a complex environment.
• Ability to act with integrity, professionalism, and confidentiality.
• Ability to be dependable, follow instructions, respond to direction, and improve performance through feedback.
• Ability to be resourceful and take initiative to identify issues, solve problems, and improve current practices.
• Ability to exercise mature judgement, learn quickly, and remain flexible while working in a constantly changing environment.
• Possess attention to detail and ability to maintain a high-quality of work.
• Ability to communicate effectively with others in verbal and written form, with tact and diplomacy, and work harmoniously with a wide variety of individuals.
• Ability to manage time effectively and adapt to changing priorities and workload.
• Ability to plan and coordinate large projects across several departments.
• Ability to prepare and understand complex reports.
• Strong understanding of IT Systems.
• Strong critical thinking and problem-solving abilities.
• Strong attention to detail, time management, and organizational skills.
• Extensive knowledge of regulations surrounding PHI and ePHI privacy laws and regulations.
• Ability to recognize and accommodate changing priorities as communicated by Director of Operations and in order to meet short- and long-term deadlines/goals.
• Strong computer skills and knowledge of Microsoft Office Suite (Word, Outlook, and Excel applications). Ability to use and maintain database software programs.
• Possess strong recordkeeping skills and ability to maintain accurate files and records.
• Ability to understand and incorporate detailed requirements into action plans and implement them.
• Ability to represent the agency professionally and effectively in meetings with internal and external stakeholders and to participate in outreach and fundraising efforts.
• Ability to train and delegate responsibilities among employees.
• Ability to interpret and comply with program requirements, regulations, and contracts.
• Basic knowledge of computers and web-based applications such as timekeeping, training, and email programs.

SUPERVISORY REQUIREMENTS:

• No supervisory requirements

PHYSICAL REQUIREMENTS:

• Physical abilities sufficient to move between different staff work areas, communicate with co-workers and the public, operate a computer, produce reports, talk on the telephone, travel to other agency worksites, and practice safe lifting techniques.

ANALYSIS OF PHYSICAL DEMANDS:

Key (Based on typical week): N=Never; R=Rarely (Less than 1 hour per week); O-Occasional (1%-33% of time); F=Frequent (34%-66% of time); C=Constant (over 66% of time)

The above statements are intended to describe the general nature of work performed. They are not to be considered an exhaustive list of all job tasks performed. The agency reserves the right to change job descriptions, work hours or work sites as required by the program.

The Humboldt Senior Resource Center is a private, non-profit, multi-purpose senior center providing a continuum of social and health related services. The agency currently holds contracts with the California Department of Aging and Area One Agency on Aging.

The Humboldt Senior Resource Center is an equal opportunity employer. We will not unlawfully discriminate against qualified applicants or employees with respect to any terms or conditions of employment based on race, color, national origin, ancestry, sex, sexual orientation, age, religion, physical or mental disability, medical condition, pregnancy, breastfeeding, gender identity, marital status, citizenship status, military or veteran status, genetic information, or other basis protected by applicable Federal or State law.