Privacy Manager in Shelton, Washington at Mason Health

Privacy Manager: This 0.6 FTE/Part-Time position is scheduled to work day shifts of less than 8 hours per day.

Compensation: Exempt employee, $56.72/HR — $81.03/HR. Placement within this range is based on years of applicable experience.

Benefits Include:

At Mason Health, we are committed to providing our employees with a comprehensive benefits package that supports both your professional growth and personal well-being. Whether you are a part-time or full-time member:

Health & Wellness Benefits:

• Medical, Dental & Vision Insurance – With employer paying premiums for full-time employees
• Mental Health & Wellness Resources – Access to our Employee Assistance Program (EAP), Talkspace, and the Calm App.
• Life Insurance
• Short & Long-Term Disability Insurance

Financial Benefits:

• Retirement/Deferred Compensation Plans – Mason Health contributes 8% of your compensation every pay period when you contribute at least 5%.
• Flexible Spending Account (FSA)
• Tuition Assistance Program
• Approved by the Health Resources and Services Administration (HRSA) for student loan repayment programs.

Time Off & Work-Life Balance:

• Generous Paid Time Off (PTO) – Accrue up to 8 hours of PTO every bi-weekly pay period, starting with 5 weeks of PTO and increasing to 7+ weeks after 3 years.

Exciting Incentive:

• Employee Referral Program – Earn up to $7,500 depending on the role.

Job Summary:

The Privacy Manager is responsible for supporting the hospital’s Compliance & Privacy Officer in the day-to-day management and continuous improvement of privacy compliance activities. This role focuses on incident response and investigation, reporting and monitoring, and staff training and education to ensure compliance with federal and state privacy regulations, including HIPAA and HITECH.

The Privacy Manager assists with operational tasks, special projects, and departmental support, working collaboratively with department leaders. By coordinating investigations, preparing compliance reports, and delivering training, the Privacy Manager helps strengthen the hospital’s culture of confidentiality, accountability, and compliance while supporting the strategic direction of the Compliance & Privacy Officer.

Essential Duties and Responsibilities:

Incident Response & Investigations:

1. Manage the intake, documentation, investigation, and resolution of privacy complaints, breaches, and incidents.
2. Coordinate breach notification processes in accordance with state and federal requirements.
3. Track and implement corrective actions to prevent recurrence of privacy violations.

Reporting & Monitoring:

1. Prepare routine and ad hoc reports on privacy compliance performance, incident trends, and outcomes of investigations.
2. Monitor privacy-related metrics to identify patterns, risks, and areas for improvement.
3. Maintain audit-ready documentation to support regulatory reviews and internal oversight.

Training & Education:

1. Develop and deliver privacy training programs for staff, providers, and volunteers.
2. Incorporate privacy compliance education into new employee orientation.
3. Provide targeted refresher sessions and specialized training for high-risk departments.

Collaboration & Support:

1. Work with operational leaders to address privacy-related questions and concerns.
2. Provide input on new processes, technologies, or projects to ensure privacy considerations are included.
3. Maintain communication tools such as the privacy hotline or reporting system to encourage reporting of concerns.

Continuous Improvement:

1. Evaluate the effectiveness of privacy education, incident response processes, and reporting tools.
2. Stay current with evolving privacy regulations, guidance, and best practices.
3. Recommend updates to policies, procedures, and workflows to strengthen the hospital’s privacy program.
4. Other duties, as assigned.

Required Education and Experience:

1. Bachelor’s degree in healthcare administration, health information management, or related field. Master’s Degree preferred.
2. 2 years of experience in healthcare privacy, compliance, or health information management preferred.

Required Licenses, Certifications and/or Registrations:

1. Certification in Healthcare Privacy and Security (CHPS), Certified in Healthcare Compliance (CHC), or Registered Health Information Administrator/Technician (RHIA/RHIT) preferred.

Required Knowledge, Skills and Abilities:

1. Knowledge of HIPAA, HITECH, and state privacy regulations with the ability to apply them in healthcare operations.
2. Understanding of healthcare workflows, Health Information Management, IT security, and compliance reporting.
3. Skill in conducting investigations of privacy incidents, documenting findings, and implementing corrective actions.
4. Strong analytical skills to track metrics, identify trends, and prepare clear compliance reports.
5. Effective training and presentation skills to design and deliver engaging privacy education.
6. Excellent written and verbal communication skills to convey complex requirements clearly.
7. Ability to collaborate across departments and build strong working relationships.
8. Strong organizational and time management skills to manage multiple tasks and deadlines.
9. Proficiency with EHR systems, incident tracking tools, and Microsoft Office Suite.
10. Ability to respond quickly and effectively to privacy concerns while maintaining professionalism.
11. Commitment to maintaining confidentiality and handling sensitive information with discretion.
12. Ability to support the Compliance & Privacy Officer in daily operations and special projects.

Mason Health practices equal employment opportunity towards all workforce members and applicants for employment. Mason Health does not engage in or tolerate any discrimination in the workplace prohibited by applicable local, state, or federal law. Specifically, no workforce member will be discriminated against on the basis of their race, color, sex/gender (including pregnancy), sexual orientation, religion/creed, age, disability, marital or veteran status, national origin, genetic information, or any other characteristic protected by applicable state or federal law.