Medi-Cal Privacy Officer - REMOTE in California

At Prime Therapeutics (Prime), we are a different kind of PBM, with a purpose beyond profits and a unique ability to connect care for those we serve. Looking for a purpose-driven career? Come build the future of pharmacy with us.

The Senior Privacy Analyst is responsible for supporting Prime in complying with contractual requirements, as well as state and federal regulations regarding the protection of, and access to protected health information. This position is responsible for developing, implementing and maintaining privacy policies and procedures and evaluates the organization's overall adherence to privacy practices. This position is also responsible for administering various activities to prevent, detect and correct privacy initiatives across the organization.

• Collaborate with Privacy Leadership and internal business partners and assigned business areas to ensure Prime possesses the appropriate privacy materials; facilitate ongoing maintenance of these materials to ensure alignment to current practice, industry trends and regulatory changes
• Administer policies and procedures, facilitate Privacy Champion program, committee and team meetings in support of business or Privacy requirements
• Serve as a subject matter expert on privacy for questions and business support, with a focus on the HIPAA Privacy Rule
• Monitor and manage the receipt, documentation, tracking, investigation and resolution for complaints concerning Prime's privacy policies and procedures; collaborate with compliance, legal counsel and designated business areas to gather information, recommend solutions and ensure the appropriate action is taken to resolve or close the issue
• Manage the intake and resolution of complex privacy incidents and complaints involving potential inappropriate use or disclosure of PHII; collaborate with business partners to recommend and ensure implementation of corrective action and support efforts to prevent future incidents
• Research and maintain up-to-date records of applicable federal and state privacy laws; monitor advancements in privacy laws and recommend enhancements to Prime's privacy practices
• Collaborate with legal, Privacy Leadership and others in the development, implementation, and maintenance of privacy policies, procedures and other privacy documentation; develop privacy guidance and tools; evaluate and fulfill the privacy training requirements across the enterprise
• Monitor Prime's compliance with privacy practices and facilitate consistent application of sanctions for failure to comply with privacy policies; collaborate with the Privacy and Security teams, Human Resources, and legal counsel as applicable to ensure individual and organizational adherence to privacy obligations
• Administer oversight and monitoring activities such as site assessments, risk assessments and validations; support vendor relationships and contracting efforts
• Other duties as assigned

• Bachelor's degree in Business, Healthcare, Political Science, Legal, or Juris Doctor or related area of study; or equivalent combination of education and/or relevant work experience; HS diploma or GED is required
• 5 years of experience working within a legal or compliance role, or in a project or program coordination role within a highly regulated industry
• 2 years of experience working with HIPAA and state or federal privacy laws
• Must be eligible to work in the United States without the need for work visa or residency sponsorship

• Strong verbal and written communication skills
• Strong attention to detail; organizational and time management skills
• Proven ability to maintain discretion and confidentiality
• Demonstrated ability to apply critical thinking skills and problem solve through difficult situations
• Experience establishing and maintaining key relationships internally and externally, at all levels of an organization
• Ability to establish rapport and effectively influence and/or present information to a wide variety of audiences

• Healthcare, Pharmacy Benefit Management (PBM) or other managed care work experience
• Master's degree or other advanced education in Business, Healthcare, Political Science, Legal, or related area of study
• Certified Information Privacy Professional (CIPP), Certified Information Privacy Technologist (CIPT) or Certified Information Privacy Manager (CIPM) certifications from International Association of Privacy Professionals (IAPP)
• Certified Compliance and Ethics Professional (CCEP) or Certified Healthcare Compliance Professional (CHC)
• Project management experience and/or Project Management Professional (PMP) certification

Every employee must understand, comply with and attest to the security responsibilities and security controls unique to their job, and comply with all applicable legal, regulatory, and contractual requirements and internal policies and procedures.

Every employee must be able to perform the essential…