Privacy Officer - 2025488 at World Relief

Are you a person of compassion? An advocate for justice? Someone who stands up for the rights of the vulnerable and speaks out for the marginalized, the exploited and the forgotten?  Do you believe in our calling as Christians to welcome the least of these and love our neighbor? If you answered ‘yes’, to any of the above, World Relief, and millions of people around the world need you. At this pivotal moment in time, we are rapidly expanding and growing our team to meet the increasing needs of our world. We are looking for people who want to use their gifts and talents to make a real and tangible difference in our world and the lives of the suffering.   If you’re looking for a purpose-driven career in which you can grow your talents, while also standing up for the rights of the vulnerable, we want you to join us today.     ORGANIZATION SUMMARY World Relief is a global Christian humanitarian organization whose mission is to boldly engage the world’s greatest crises in partnership with the church. The organization was founded in the aftermath of World War II to respond to the urgent humanitarian needs of war-torn Europe. Since then, for 80 years, across 100 countries, World Relief has partnered with local churches and communities to build a world where families thrive and communities flourish. Today, organizational programming focuses on humanitarian and disaster response, community strengthening and resilience, and refugee & immigrant services and advocacy. This position is reliant upon funding and may be subject to modification or termination based on resource availability. POSITION SUMMARY: Under the authority of the IT Department and the Administrative Division, the Privacy Officer will be responsible for implementation and keeping up to date the organizational data privacy policies in accordance with federal and state laws.  The role will manage the overall privacy strategy, monitor, audit, and document compliance and ensure staff are adequately trained and following written policies and procedures.  In the event of a breach of privacy, oversee the review, reporting, documentation and mitigation of the incident as per relevant legal obligations.  This role will also serve as a project lead, working closely with staff through review and compliance tasks to address gaps in organizational privacy compliance. It will work closely with the organization's security officer to ensure alignment and effectiveness. ROLE & RESPONSIBILITIES: • Develop and implement corporate privacy policies and procedures. • Provide training and guidance to staff regarding data privacy. • Elaborate the list of training courses/content needed for the staff working under the various health components of WR’s HIPAA/HITECH hybrid framework. • Conduct regular and ongoing privacy risk assessments and legal-compliance reviews using WR’s risk assessment systems and cycles, evaluating compliance with all applicable local, state, federal, and international regulations. • Identify potential areas of privacy vulnerability and risk. Develop corrective action plans to be approved for resolution of problematic issues and guidance for risk mitigation. • Collaborate with the Security Officer to ensure protection of electronic protected health information (ePHI) in compliance with both federal and state law, and where necessary define steps to mitigate any identified risks. • Investigate and track privacy incidents as they arise, reporting inappropriate access and/or disclosure of protected health information according to the Health Insurance Portability and Accountability Act (HIPAA) and HITECH privacy rules. • Coordinate, convene and report progress to and recommendations for changes to the internal intradepartmental Privacy Decision Group. • Keep abreast of the changing landscape of privacy laws and best practices, updating the relevant policies and procedures and communicating these changes accordingly. • Monitor and compliance follow-up with staff for the documentation platform for detailed documentation of staff training, and other privacy compliance requirements for staff working in roles where HIPAA compliance is required (currently about 40 staff with annual growth in the next three years of 10 to 30 staff per year). • Collaborate with diverse teams across departments and functions • Demonstrate success in setting goals and objectives, managing to outcomes, and developing and using data to inform continuous improvement and decision making • Professional, collaborative approach that is solution oriented; demonstrated leadership and management skills including the ability to escalate concerns through appropriate chains of command. • Coordinate and move forward all activities related to the development, implementation, maintenance, and adherence to the organization’s policies and procedures covering privacy and access to patient health information (PHI/ePHI) for hybrid entities in accordance with federal and state laws and the organization’s information privacy practices JOB REQUIREMENTS: • Mature and personal Christian faith • Committed to the mission, vision, and values of World Relief • Desire to serve and empower the Church to impact vulnerable communities • Able to affirm and/or acknowledge World Reliefs Core Beliefs, Statement of Faith, Christian Identity and National Association of Evangelicals' For the Health of The Nation document • Five years of experience in compliance, privacy role, or equivalent experience is required. • At least two years of experience as a Privacy Officer in a nonprofit organization under a hybrid entity framework to implement HIPAA/HITECH rules just to the designated covered health and business associate components of the hybrid entity. • Ability and willingness to cultivate, engage with internal and external partners and to promote and achieve organizational strategic outcomes • Subject matter expert on laws, regulations, policies, and procedures relating to the protection of private and confidential information. • Have a highly developed written and verbal communication skills. • Sound business judgment on handling sensitive and confidential information. • Ability to work in diverse settings. PREFERRED QUALIFICATIONS: • Experience in a multi-program sector nonprofit where only a small percentage of the programs or activities are covered health components of the entity. • Familiar with behavioral health practices is preferred. World Relief offers a competitive benefits package and employee discount program for full-time, Regular, and part-time (25+ hours per week) employees   World Relief is honored to be recognized with the Gold-level Cigna Healthy Workforce Designation for exceeding the core components of our well-being program including leadership and culture, program foundations and execution, and whole person health.   *** Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.   We are proud to be an EEO/AA employer M/F/D/V. We maintain a drug-free workplace and perform pre-employment substance abuse testing.   For World Relief staff, strong commitment to the mission, vision, and values of World Relief is essential, and Christian faith is a prerequisite for employment, based upon United States federal guidelines provided in Title VII of the Civil Rights Act of 1964.