Manager Regulatory Compliance

Profile

Manager, Regulatory Compliance
Duties: Develops, implements, and oversees regulatory compliance strategies for the department. Identifies and ranks areas at risk of exposure and recommends strategies to address issues. Develops systems and relationships to support auditing activity, and organizes panels of experts to assist in reviews and analyses. Identifies and reports general compliance issues that may arise through the work process, and writes and revises standard operating procedures. Reviews technical publications, articles, and abstracts to stay abreast of current regulations and trends, and ensures appropriate actions are taken to incorporate necessary revisions into the workplace environment. Serves as liaison to other institutional monitoring and audit groups. Establishes and continuously assesses the effectiveness of the internal controls within the unit and compliance with University policies and procedures. Ensures employees are trained on controls within the function and on University policy and procedures. Negotiate all business associate agreements, data use agreements, and other agreements requiring the Office’s review and input. Advising departments and business units on day-to-day activities with privacy and data security implications. Review and ensure that proposals, contracts, and agreements are properly entered into the privacy and data security databases and securely maintained. Support the vendor management programs, M&A diligence, and other contractual relationships. Review, revise, or develop standards for privacy and data security contracts and agreements, including presentation of general language and provisions. Draft contractual provisions based on strategy discussions, senior management input, and organizational needs and expectations including domestic and international data transfer. Research and monitor changing federal, state and international laws relating to privacy and data security requirements. Maintain and revise Privacy, Data Security, and other related policies and procedures. Identify and develop new policies and procedures to address changing risk in the privacy and data security environment. Draft and maintain various privacy notices and forms to be consistent with business practice and compliant with applicable state and federal laws. Participate in team response to privacy incidents including patient complaints, HHS inquiries, and other privacy related incidents. Establish partnerships with information security and other relevant areas to ensure appropriate safeguards are implemented to protect sensitive information. Participate in the development and dissemination of privacy and data security training materials. Other activities directed at achieving legal and regulatory compliance. Timely complete special projects as assigned.

Company info

Sign Up Now - WashingtondcCrossing.com