Privacy Associate II

Horizon Blue Cross Blue Shield of New Jersey empowers our members to achieve their best health. For over 90 years, we have been New Jersey's health solutions leader driving innovations that improve health care quality, affordability, and member experience. Our members are our neighbors, our friends, and our families. It is this understanding that drives us to better serve and care for the 3.5 million people who place their trust in us. We pride ourselves on our best-in-class employees and strive to maintain an innovative and inclusive environment that allows them to thrive. When our employees bring their best and succeed, the Company succeeds.

• Evaluate enterprise initiatives to ensure information handling conforms to applicable legal, regulatory and policy requirements. Coordinate the process and serve as the contact person.

• Identify potential privacy risks of collecting, maintaining and disseminating information and evaluate alternatives to mitigate.

• Provide privacy regulation expertise to functional or operational areas of the business.

• Interpret federal/state regulations, as applicable to privacy policies and procedures, and advises business units on implementation of requirements.

• Promote effective relationships with business areas; Partner with business areas on the creation of development of appropriate Corrective Action Plans (CAPs).

• Independently investigate, or manage the investigation of, privacy-related issues, as well as, performs assessments of the organization's privacy compliance including determining root cause, and developing corrective action plans with other business units, as needed.

• Perform detailed data analysis to identify trends in privacy and information governance risks and appropriate mitigations.

• Lead the development and delivery of relevant privacy compliance training to both internal and external audiences (from individual contributors up to managers, directors and higher).

• Ensure Horizon's privacy standards & policies are understood by the workforce, vendors and other business related third-parties.

• Identify and develop value added metrics; analyze root causes, trends, and systemic issues and prepare reports for senior management and the Board of Directors.

• Interact with OCR or other regulatory agencies for matters relating to privacy and security of Protected Health Information, including investigating issues identified by regulatory agencies and preparing reports.

• Serve as a seasoned resource and subject matter expert to other members of the privacy team. Mentor and support junior staff; perform quality reviews of junior staff work product.

• Independently manage special projects and ad-hoc tasks from management.

Addendum: Privacy Associate IIs working within the Compliance function of the IGPO will also be responsible for the following:

• May assist in researching and reviewing information governance and privacy policies, terms of service, and other legal documents related to privacy and information governance.

• May support information governance activities including monitoring for compliance to information governance policies, identifying risks and delivering training programs and awareness campaigns.

• Support the team in managing data access requests and other privacy-related inquiries and/or cases and complaints.

• Assist in the development and maintenance of policy inventories and data mapping exercises.

• Coordinate with internal stakeholders to ensure compliance with privacy laws and regulations.

• Assist in the preparation of privacy impact assessments and compliance reports.

• Assist in responding to data breach incidents, including documenting incident details and facilitating communications.

• High School Diploma/GED required.

• Bachelor degree preferred or relevant experience in lieu of degree.

• Requires a minimum of five years of compliance experience in a health care environment or the health insurance industry.

• Requires a minimum of three years of experience in a privacy compliance role.

• Prefers certification as a privacy professional from an organization such as IAPP, HCCA or similar.

• Requires in-depth knowledge of the Federal and State regulatory environment in the health insurance industry, with emphasis on HIPAA privacy and security rules, as well as other state and federal privacy laws.

• Knowledge of Privacy by Design principles.

• Requires proficiency in the use of personal computer and supporting software including Microsoft Office (Word, Excel, Outlook and PowerPoint).

• Experience with conducting privacy risk assessments preferred.

• Requires strong communication and presentation skills.

• Can convey clear and concise ideas and facts orally and written.

• Requires the ability to research and resolve problems through interaction with companywide personnel.

• Excellent organization and an ability to manage multiple priorities and shifting priorities.

• Able to interpret regulations and effectively apply them to business processes.

• Data analysis.

• Attention to detail.

• Ethics and integrity.

• Requires the ability to work independently.

Horizon BCBSNJ employees must live in New Jersey, New York, Pennsylvania, Connecticut or Delaware

Salary Range:

This compensation range is specific to the job level and takes into account the wide range of factors that are considered in making compensation decisions, including but not limited to: education, experience, licensure, certifications, geographic location, and internal equity. This range has been created in good faith based on information known to Horizon at the time of posting. Compensation decisions are dependent on the circumstances of each case. Horizon also provides a comprehensive compensation and benefits package which includes:

• Comprehensive health benefits (Medical/Dental/Vision)

• Retirement Plans

• Generous PTO

• Incentive Plans

• Wellness Programs

• Paid Volunteer Time Off

• Tuition Reimbursement

Disclaimer:
This job summary has been designed to indicate the general nature and level of work performed by colleagues within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of colleagues assigned to this job.

Horizon Blue Cross Blue Shield of New Jersey is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, protected veteran status or status as an individual with a disability and any other protected class as required by federal, state or local law. Horizon will consider reasonable accommodation requests as part of the recruiting and hiring process.