System Privacy Officer

Location: Burlington, MA
Job ID: 157668-1A
Date Posted: Dec 17, 2019
Category: Professional

Save Job Job Saved

Job Description

Welcome To

Welcome to Shared Services, our team uses a coordinated approach to delivering administrative and operational services across Lahey. Our Shared Services colleagues leverage resources across the organization to ensure we provide high-quality, high-value care to the communities we proudly serve.  The Shared Services team includes colleagues who focus on business and network development, legal services, facilities and real estate, human resources, information technology, finance, philanthropy and marketing and communications. 

About the Job

The BILH System Privacy Officer will lead the Privacy Program for the Beth Israel Lahey Health System and its member organizations.  The System Privacy Officer will serve as a system leader, subject matter expert and resource, providing strategic direction, vision, guidance and leadership for the BILH Privacy Program.  In this role, the System Privacy Officer is responsible for the continued development and implementation of a BILH system-wide privacy program, and the ongoing unification of policies, procedures, monitoring, and other strategies essential for an effective program. Duties include ensuring the proper management and oversight of privacy related matters, development, maintenance of and adherence to privacy-related policies and procedures, privacy monitoring, training, and other essential components of an effective BILH Privacy Program. The System Privacy Officer will serve as a member of the BILH Compliance leadership team and as a subject matter expert leading and developing the Privacy Program across all entities and service lines within BILH.


Essential Duties & Responsibilities including but not limited to:

The System Privacy Officer will, in coordination with entity leadership and management, the Chief Compliance Officer and his or her designees, and legal counsel:

  • Provide leadership and subject matter expertise on privacy and related topics to the Beth Israel Lahey Health System and all member organizations;
  • Provide guidance and oversee the development, implementation, and maintenance of organization-wide privacy policies and procedures;
  • Demonstrate high level of proficiency and form strategic partnerships throughout BILH to ensure compliance with federal and state regulations, including privacy standards and regulations such as HIPAA, HITECH, MGL 93H, 42 CFR Part 2, and other related state and federal laws, rules and regulations;
  • Lead the development of and work closely with system compliance colleagues including BILH member entity Compliance and Privacy program leaders and peer collaborators toward the development of a robust system-wide privacy program;
  • Ensure a process for receiving, documenting, tracking, investigating, and taking action on all privacy complaints; investigating and evaluating suspected breaches, sending required notification letters to individuals, file required reports with federal and state agencies, and working with legal counsel, prepare documentation for submission to OCR and other third parties upon request and/or as required;
  • Provide direction and leadership for system-wide PHI monitoring and auditing activities, including access to PHI and ePHI; oversee and support the continued implementation and system design of technological solutions;
  • Collaborate and coordinate with HIM departments and other organization personnel throughout the System to assure that patient rights to access, inspect, amend, and restrict access to protected health information, and any other patient rights are administered in compliance with applicable policies and privacy laws;
  • Ensure that the organization has and maintains appropriate privacy and confidentiality consents, authorization forms, and information notices and materials reflecting current practices and regulatory requirements
  • Provide assistance with oversight and monitoring activities of the compliance and privacy programs, establish annual privacy goals and objectives to be included in the annual Compliance Work Plan and/or Risk Assessment;
  • Conduct regular program reviews and propose modifications as necessary to ensure best in class system-wide privacy program;
  • Together with legal counsel, will ensure a robust Business Associate Agreement process such that BAA’s are executed, maintained, updated and periodically audited;
  • Oversee Privacy Training throughout BILH, including content development and  the delivery of initial and ongoing privacy training and orientation to all employees, volunteers, and professional staff and other workforce members as required;
  • Initiate, facilitate, and promote activities to foster privacy awareness throughout BILH and its member entities and service lines;
  • Convene system-wide committees, workgroups or other forums for the sharing and exchange of information as well as to engage stakeholders in developing system-wide solutions that support consistency and manage risk effectively;
  • Provide routine and ad hoc high-level and informative updates on emerging trends, metrics and other program information to senior and executive leadership; 
  • Coordinate with regulatory agencies when requested and assist compliance program management and administration in compliance reviews, audits and investigations as needed;
  • Lead and serve as an effective and engaged member of BILH and member entity committees and other forums supporting privacy and related initiatives;
  • Perform other duties as assigned consistent with an experienced health care privacy professional.


  • Bachelor’s degree required.  Master’s degree or law degree preferred.

Licensure, Certification & Registration:

  • Health care compliance and privacy professional certification


  • Knowledge of healthcare operations, including hospital experience; at least 5 years previous experience in healthcare compliance and privacy; 3-5 years supervisory / management experience in a leadership role required.

Skills, Knowledge & Abilities:

  • Excellent communication, interpersonal, and organization skills; ability to prioritize and meet deadlines; strong analytical skills.  Must be able to prepare and present to diverse audiences.
  • Demonstrated ability to lead initiatives and manage teams in a matrix environment, including progressive program and project management and leadership roles in large and complex organizations.

Preferred Qualifications & Skills:

  • Decision Making: Ability to make decisions with significant, broad implications for the management and operations of the Compliance and Privacy Program.
  • Problem Solving: Ability to address problems that are broad, complex, abstract often involving system-wide issues and requiring substantial creativity, resourcefulness, staff engagement, negotiation, and diplomacy to develop solutions.
  • Independence of Action: Ability to set direction and vision.
  • Setting Priorities: Ability to establish priorities and assess allocation of resources.
  • Written Communication: Ability to communicate complex information to staff, management, and external customers.
  • Oral Communications: Ability to demonstrate broad and comprehensive knowledge of theories, concepts, practices and policies.
  • Knowledge: Ability to demonstrate broad and comprehensive knowledge or theories, concepts, practices and policies with the ability to use them in complex situations across multiple functional areas.
  • Team Work:  Ability to act as a team leader for projects or workgroups, creating a collaborative and respectful team environment.
  • Customer Service: Ability to understand operational initiatives to meet or exceed customer service standards and expectations in assigned unit(s) and/or across multiple areas in a timely and respectful manner.

Dept/Unit Specific Skills: 

  • Advanced skills with GSuite and Microsoft applications, including Outlook, Word, Excel, PowerPoint as well as other web-based applications



About Us

Beth Israel Lahey Health is comprised of world-class academic medical centers and teaching hospitals, leading community hospitals, a renowned orthopedics hospital, and comprehensive ambulatory centers. Through our focus on population health, our clinically integrated network of affiliated providers, as well as vital services such as behavioral health and home care services, we are able to provide a new model of care that improves the health of all those we serve. With more than 9,000 nurses, 4,300 physicians and more than 35,000 employees, our model ensures care is highly coordinated and locally delivered, with lower costs and exceptional quality.                                                      

Beth Israel Lahey Health is committed to attracting, developing and retaining top talent in a market long recognized and revered as a global leader in health. With a team approach to care, we encourage learning and growth at all levels, and we offer competitive salaries and benefits. We adhere to the principles of a just and fair work environment for all colleagues, where respect is foundational. We strive to create a diverse and inclusive workplace that reflects the communities in which we work and serve.