This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
The HIPAA Subject Matter Expert supports the Health and Human Services (HHS), Office for Civil Rights (OCR) promoting the right to access health information and protection of the privacy and security of this information. These highly trained and highly skilled consultants and analysts are integral to the success and performance of OCR and to further OCR’s mission.
Job Responsibility:
Reviews security and privacy complaints, data breach notification and cybersecurity incident reports and other correspondence and evidence to determine whether complaints, self-reported breaches or breach notification reports indicate non-compliance with the HIPAA Security Rule
Reviews data provided by the healthcare organizations across the nation to assess the overall impact of security and privacy incidents
Evaluates and determines the technical sufficiency of submissions from HIPAA covered entities and business associates in response to data and documentation requests (i.e. Assessing reports related to security baselines, penetration tests, vulnerability assessments, and digital forensics)
Documents processes, standard operating procedures and system requirements
develops reports summarizing the analysis along with formulating recommendations for OCR to consider for future action
Develops written reports with technical security analyses, summaries, and recommendations for action, reports on root causes of problems, efficiency, and support needs
Provides expertise in the development and evaluation of health information privacy policies and technologies, specifically regarding protected health information
deidentified/re-identified health information
limited data sets
Provides subject matter expert analysis, evaluation, and recommendations based on national security standards (NIST), industry best practices from the International Organization for Standardization and implementation specifications of the HIPAA Security Rule
Provides DIN designing, implementing, and managing information security, data protection, and risk management programs, including policies, procedures, and controls for protected health information based on HIPAA requirements
Provides advisory expertise in the areas of risk analyses, vulnerability assessments, incident response, security architecture, physical security, business continuity and disaster recovery, enterprise mobility, threat intelligence and analysis, security awareness and online safety, and resolution of highly complex security projects and issues
Works well with programmers, developers, content managers, and other key personnel in an interactive development situation
Requirements:
Preference will be given to candidates with relevant industry certifications from CISSP, CISM, CIPP/CIPT/CIPT
Ten (10) years of relevant cybersecurity experience is preferred
Experience in auditing and generating audit reports is required
Fundamental knowledge of basic systems analysis
Knowledge of a broad range of relevant computer systems, applications, and/or related equipment
Knowledge of computer security procedures and protocol
Basic knowledge of advanced operating system, network, or application management tasks
Knowledge of current technological developments/trends in area of expertise
Knowledge of federal copyright laws as they pertain to the use of computer software
Ability to integrate emerging technologies and applications into current environment and to identify technical specifications to meet user needs including operating system and network or application configuration
Ability to identify technical specifications to meet user needs including operating system and network or application configuration
Skills in planning, organizing, and adapting within a multi-tasking environment
Strong interpersonal skills, flexibility, and customer service orientation
Ability to gather facts and data for technical proposals and to expand upon them or develop alternatives and to evaluate emerging technologies and identify their potential impact within the existing environment
Ability to evaluate emerging technologies and identify their potential impact within the existing environment
Ability to analyze complex computer problems and provide solutions
Ability to communicate effectively, both orally and in writing
Ability to communicate technical information to non-technical personnel
Ability to develop and deliver presentations
Minimum educational experience is a Bachelor’s degree from an accredited university with the focus on Cybersecurity, Computer Science, Information Sciences, or other comparable fields of Study
Welcome to CrawlJobs.com – Your Global Job Discovery Platform
At CrawlJobs.com, we simplify finding your next career opportunity by bringing job listings directly to you from all corners of the web. Using cutting-edge AI and web-crawling technologies, we gather and curate job offers from various sources across the globe, ensuring you have access to the most up-to-date job listings in one place.
We use cookies to enhance your experience, analyze traffic, and serve personalized content. By clicking “Accept”, you agree to the use of cookies.