Senior HIPAA Auditor - Baylor Scott & White Health
Madison, WI
About the Job
JOB SUMMARY
_The pay range for this position is $48.72/hr (entry level qualifications) - $84.42/hr (highly experienced). The specific rate will depend upon the successful candidate's specific qualifications and prior experience._
Audit compliance with state and federal laws, as well as Baylor Scott & White Health policies and procedures regarding the security and confidentiality of protected health and personal information. Assist the Baylor Scott & White Health SVP and Chief Information Security and/or Privacy Officers with auditing HIPAA security and privacy incidents and complaints related to or resulting from the Baylor Scott & White Health electronic medical record [EPIC] and related application(s). Utilizing approved materials and templates, maintain appropriate documentation for all audits, security and privacy incident investigations, resolutions, and sanctions. Formulate, conduct, document, and report on auditing activities related to the security regulations, including, but not limited to: Identifying and assessing security risks; Planning and conducting operational security-related audits; and Compiling audit work-papers and reporting findings and recommendations; Establish and maintain liaison with key regional, facility, department and enterprise personnel to coordinate and complete audits. Serve as subject matter expert and demonstrate a willingness to collaborate with and educate peers and colleagues as appropriate. The sensitivity, complexity and size of audit assignments will vary significantly; must be comfortable working in ambiguous and/or stressful situations. Flexibility and the ability to change priorities quickly are required of this position. The capacity to function at a high-level in a matrixed management and reporting structure is critical to success.
SPECIALIZED KNOWLEDGE
Information Security, Healthcare Administration, Health Information Management or related field or equivalent combination of is required. Demonstrate strong understanding of standard audit processes. Epic audit Experience Excellent knowledge of legal and regulatory requirements (HIPAA, HITECH, etc. ). Demonstrated expertise in the entire Microsoft Office package which includes Access, Excel, Word and PowerPoint is required. Strong analytical and auditing skills. Ability to interpret, investigate and resolve internal and external customer complaints and concerns; able to take and follow detailed instructions, with minimal supervision from manager. Ability to communicate effectively, both verbally and in writing; detail oriented. Capable of managing multiple tasks with tight deadlines. Must maintain the highest level of confidentiality and decorum regarding daily work activities. Flexibility and the ability to change priorities quickly may be required of this position. Minimum of four (4) years relevant work Experience (in application, data or HIPAA auditing) in a multi-facility environment is required.
DESIRED ATTRIBUTES
Experience working with enterprise audit tool, such as EPIC Clarity, Protenus, and/or FairWarning. Thorough knowledge of healthcare clinical operations, hospital revenue cycle systems, hospital billing and coding, and healthcare compliance issues and requirements. Working knowledge of other disciplines outside own area of expertise, including clinical disciplines, registration, billing and collections, HIM / Medical Records management, and information technology. Capable of producing and communicating highly-sensitive documentation and results to executives, other leaders, and outside organizations as appropriate.
INFORMATION SECURITY
Maintains confidentiality of log-on password(s) and security of other authentication devices (e.g., key fobs, proximity devices, etc.). Ensures privacy and security of information entrusted to their care. Uses company business assets and information resources for management-approved purposes only. Adheres to all information privacy and security policies, procedures, standards, and guidelines. Promptly reports information security incidents to the Baylor Scott & White Health Information Security Officer.
RESPONSIBILITIES AND DUTIES
1. 25%
Conduct and coordinate security and confidentiality audit work for the EMR and related systems. Accurately identify and analyze data from multiple systems / sources within the context of the audit objectives to effectively evaluate audit results, weighing the relevancy, accuracy, and perspective of conclusions against the accumulated audit evidence and formulate appropriate subsequent actions and recommendations. Consistently and in a standard method document relevant facts and information to support the audit and conclusions so others can follow the results, logic and methodology. Lead matrixed team members tasked with work in this area.
2. 25%
Effectively communicate audit results timely and transparently, both verbally and in writing, so they are placed in the appropriate context, and understood by the recipient.
3. 10%
Assist appropriate management e. g. Director Data Protection and Service Provider Management, SVP and Chief Information Security and/or Privacy Officers, Director Human Resources with reviewing audit results and findings when requested or assigned to do so.
4. 10%
Based on aggregated audit findings / output, work with business units and departments / teams to mitigate access related issues and as needed develop corrective action plans.
5. 10%
Be able to complete work with limited instructions yet know when to seek guidance from supervisor when circumstances warrant. Complete work assignments independently as part of a team project.
6. 10%
Demonstrate effective time management skills by completing assignments within time allotment and calendar schedules while handling multiple tasks.
7. 10%
Assist with the development of security awareness programs and the associated training.
The major duties/ responsibilities listed above are not intended to be all-inclusive of the duties, responsibilities and to be performed by individual in this job. Individual is expected to all perform other duties as requested by supervisor.
BENEFITS
Our competitive benefits package includes the following
+ Immediate eligibility for health and welfare benefits
+ 401(k) savings plan with dollar-for-dollar match up to 5%
+ Tuition Reimbursement
+ PTO accrual beginning Day 1
Note: Benefits may vary based upon position type and/or level
QUALIFICATIONS
+ EDUCATION - Bachelor's or 4 years of work experience above the minimum qualification
+ EXPERIENCE - 5 Years of Experience
As a health care system committed to improving the health of those we serve, we are asking our employees to model the same behaviours that we promote to our patients. As of January 1, 2012, Baylor Scott & White Health no longer hires individuals who use nicotine products. We are an equal opportunity employer committed to ensuring a diverse workforce. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law.
_The pay range for this position is $48.72/hr (entry level qualifications) - $84.42/hr (highly experienced). The specific rate will depend upon the successful candidate's specific qualifications and prior experience._
Audit compliance with state and federal laws, as well as Baylor Scott & White Health policies and procedures regarding the security and confidentiality of protected health and personal information. Assist the Baylor Scott & White Health SVP and Chief Information Security and/or Privacy Officers with auditing HIPAA security and privacy incidents and complaints related to or resulting from the Baylor Scott & White Health electronic medical record [EPIC] and related application(s). Utilizing approved materials and templates, maintain appropriate documentation for all audits, security and privacy incident investigations, resolutions, and sanctions. Formulate, conduct, document, and report on auditing activities related to the security regulations, including, but not limited to: Identifying and assessing security risks; Planning and conducting operational security-related audits; and Compiling audit work-papers and reporting findings and recommendations; Establish and maintain liaison with key regional, facility, department and enterprise personnel to coordinate and complete audits. Serve as subject matter expert and demonstrate a willingness to collaborate with and educate peers and colleagues as appropriate. The sensitivity, complexity and size of audit assignments will vary significantly; must be comfortable working in ambiguous and/or stressful situations. Flexibility and the ability to change priorities quickly are required of this position. The capacity to function at a high-level in a matrixed management and reporting structure is critical to success.
SPECIALIZED KNOWLEDGE
Information Security, Healthcare Administration, Health Information Management or related field or equivalent combination of is required. Demonstrate strong understanding of standard audit processes. Epic audit Experience Excellent knowledge of legal and regulatory requirements (HIPAA, HITECH, etc. ). Demonstrated expertise in the entire Microsoft Office package which includes Access, Excel, Word and PowerPoint is required. Strong analytical and auditing skills. Ability to interpret, investigate and resolve internal and external customer complaints and concerns; able to take and follow detailed instructions, with minimal supervision from manager. Ability to communicate effectively, both verbally and in writing; detail oriented. Capable of managing multiple tasks with tight deadlines. Must maintain the highest level of confidentiality and decorum regarding daily work activities. Flexibility and the ability to change priorities quickly may be required of this position. Minimum of four (4) years relevant work Experience (in application, data or HIPAA auditing) in a multi-facility environment is required.
DESIRED ATTRIBUTES
Experience working with enterprise audit tool, such as EPIC Clarity, Protenus, and/or FairWarning. Thorough knowledge of healthcare clinical operations, hospital revenue cycle systems, hospital billing and coding, and healthcare compliance issues and requirements. Working knowledge of other disciplines outside own area of expertise, including clinical disciplines, registration, billing and collections, HIM / Medical Records management, and information technology. Capable of producing and communicating highly-sensitive documentation and results to executives, other leaders, and outside organizations as appropriate.
INFORMATION SECURITY
Maintains confidentiality of log-on password(s) and security of other authentication devices (e.g., key fobs, proximity devices, etc.). Ensures privacy and security of information entrusted to their care. Uses company business assets and information resources for management-approved purposes only. Adheres to all information privacy and security policies, procedures, standards, and guidelines. Promptly reports information security incidents to the Baylor Scott & White Health Information Security Officer.
RESPONSIBILITIES AND DUTIES
1. 25%
Conduct and coordinate security and confidentiality audit work for the EMR and related systems. Accurately identify and analyze data from multiple systems / sources within the context of the audit objectives to effectively evaluate audit results, weighing the relevancy, accuracy, and perspective of conclusions against the accumulated audit evidence and formulate appropriate subsequent actions and recommendations. Consistently and in a standard method document relevant facts and information to support the audit and conclusions so others can follow the results, logic and methodology. Lead matrixed team members tasked with work in this area.
2. 25%
Effectively communicate audit results timely and transparently, both verbally and in writing, so they are placed in the appropriate context, and understood by the recipient.
3. 10%
Assist appropriate management e. g. Director Data Protection and Service Provider Management, SVP and Chief Information Security and/or Privacy Officers, Director Human Resources with reviewing audit results and findings when requested or assigned to do so.
4. 10%
Based on aggregated audit findings / output, work with business units and departments / teams to mitigate access related issues and as needed develop corrective action plans.
5. 10%
Be able to complete work with limited instructions yet know when to seek guidance from supervisor when circumstances warrant. Complete work assignments independently as part of a team project.
6. 10%
Demonstrate effective time management skills by completing assignments within time allotment and calendar schedules while handling multiple tasks.
7. 10%
Assist with the development of security awareness programs and the associated training.
The major duties/ responsibilities listed above are not intended to be all-inclusive of the duties, responsibilities and to be performed by individual in this job. Individual is expected to all perform other duties as requested by supervisor.
BENEFITS
Our competitive benefits package includes the following
+ Immediate eligibility for health and welfare benefits
+ 401(k) savings plan with dollar-for-dollar match up to 5%
+ Tuition Reimbursement
+ PTO accrual beginning Day 1
Note: Benefits may vary based upon position type and/or level
QUALIFICATIONS
+ EDUCATION - Bachelor's or 4 years of work experience above the minimum qualification
+ EXPERIENCE - 5 Years of Experience
As a health care system committed to improving the health of those we serve, we are asking our employees to model the same behaviours that we promote to our patients. As of January 1, 2012, Baylor Scott & White Health no longer hires individuals who use nicotine products. We are an equal opportunity employer committed to ensuring a diverse workforce. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law.
Source : Baylor Scott & White Health
