Deputy General Counsel, Chief Privacy Officer

The General Counsel’s Office of the Executive Office of Health and Human Services (EOHHS) is seeking a self-motivated and strategic attorney to serve as its Deputy General Counsel, Chief Privacy Officer.The General Counsel's Office functions as EOHHS’ in-house counsel. EOHHS is the largest secretariat of the executive branch and oversees the development and delivery of health and human services that promote health and safety, independence, and quality of life for individuals, families and communities throughout the Commonwealth of Massachusetts. It administers the Commonwealth’s Medicaid program, known as MassHealth, and is in the forefront of promoting and implementing federal and state health care reform initiatives.This role is one of a data strategist, adviser, and risk manager and is responsible for a wide range of complex legal and privacy activities associated with the development, implementation and administration of EOHHS programs with a focus on overseeing a comprehensive privacy program for MassHealth. The Deputy General Counsel will lead a team of attorneys and privacy professionals to safeguard the privacy of over two million Massachusetts residents served by EOHHS. This role reports directly to the General Counsel of EOHHS and works closely with the Information Security Office, IT, operations and other MassHealth and EOHHS staff.Duties and Responsibilities (these duties are a general summary and not all inclusive) : Offering advice and risk analysis concerning applicability of and compliance with all federal and state privacy statutes and regulations that may affect EOHHS’ ongoing activities and new initiatives including the Health Insurance Portability and Accountability Act (HIPAA), 42 CFR Part 2, the Massachusetts Security Breach Law (MGL c. 93H) and the Massachusetts Fair Information Practices Act (MGL c. 66A).Allocating assignments to best leverage individual legal skills, substantive expertise and cross-training and managing staff time to allow for the development of legal advice which is timely, sound, comprehensive, and responsive to agency needs.Monitoring program compliance and assessing areas of privacy risk, preparing and implementing recommendations to address compliance gaps and reduce privacy risk, and providing support to other EOHHS-programs and operations as they relate to information privacy.Providing legal support and management in the daily operations of the MassHealth privacy office, including developing, implementing, and maintaining policies and procedures, investigating and tracking privacy complaints, incidents and breaches, responding to consumer requests and other exercises of information privacy rights.Reviewing and drafting data sharing agreements, business associate agreements and other data privacy and confidentiality provisions within requests for proposals, contracts, interagency service agreements, and related procurement documents.Reviewing and drafting legal documents, including both regulatory and sub-regulatory interpretive material, and correspondence as well as identifying the need for, and assisting in the drafting of, new legislation and regulations.Taking a lead role, to ensure the organization has, maintains, and updates appropriate privacy and confidentiality consents, authorization forms and information notices and materials reflecting current organization and legal practices and requirements and promotes activities to foster information privacy awareness within the agency and related entities.Performing or overseeing initial and periodic information privacy risk assessment / analysis, role-based access controls reviews, and external audits and investigations well as conducting or recommending mitigation and remediation as necessary.Collaborating with the information security office to ensure alignment between security and privacy compliance programs including policies, practices, investigations, and acts as a liaison to the information systems department.Maintaining current knowledge of applicable federal and state privacy laws and regulations and serving as information privacy resource to the agency regarding release of information and other privacy related issues.Providing privacy related support to other attorneys in representing the agency in both affirmative and defensive litigations and to EOHHS constituent agencies.Preferred QualificationsEOHHS is seeking applicants who have at least eight (8) years of full-time, or equivalent part-time, professional experience in the practice of law or in a position requiring membership in the Bar.Applicants should have an excellent academic background and demonstrated skills and significant experience in counseling clients, legal research and analysis, oral and written advocacy, and creative problem solving.Applicants should have strong interpersonal and communication skills, the ability to effectively manage multiple projects simultaneously for a varied group of clients, the desire to work in a fast-paced and collaborative legal office, and a good sense of humor.It is desirable to have privacy or compliance experience in a HIPAA covered entity (e.g. health care provider, health plan), banking, or financial institution and / or background in and understanding of privacy law, data security, information technology, the state and federal government, MassHealth or Medicaid programs in other states, health and administrative law, health care issues and public policy. A recognized industry certification in privacy, compliance, health technology, or health administration (e.g. International Association of Privacy Professionals (IAPP); American Health Information Management Association (AHIMA); Health Care Compliance Association (HCCA)) is also desirable.About the Executive Office of Health and Human Services : The Executive Office of Health and Human Services (EOHHS) oversees expenditures of over $22 billion annually. As the largest secretariat, has approximately 24,000 employees and services almost 2 million people, one in three residents of the Commonwealth. The mission of EOHHS is to provide effective leadership and management in the development and provision of health and human services that promote health and safety, independence, and quality of life for individuals and families, and communities throughout the Commonwealth of Massachusetts.MINIMUM ENTRANCE REQUIREMENTS : Applicants must have at least (A) seven (7) years of full-time or, equivalent part-time, professional, administrative, supervisory, or managerial experience in business administration, business management, public administration, public management, clinical administration or clinical management of which (B) at least three (3) years must have been in a managerial capacity.An Equal Opportunity / Affirmative Action Employer. Females, minorities, veterans, and persons with disabilities are strongly encouraged to apply.The Commonwealth is an Equal Opportunity Employer and does not discriminate on the basis of race, religion, color, sex, gender identity or expression, sexual orientation, age, disability, national origin, veteran status, or any other basis covered by appropriate law.#J-18808-Ljbffr

Salary : $22