Sr. Product Manager (Health Care HIPAA Compliance & Vendor)

Job Description:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.

One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We’re devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being.

Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization.

Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference. Join us!

Job Description:

* Leading, directing and driving the activities for all Health Care Vendors

* Building, owning and implementing of the HIPAA Compliance / Vendor Project Plan.

* Facilitating the monthly task distribution among multiple teams and lines of business

* Identifying and implementing improvements to the project plan

* Maintaining appropriate mappings between assets (i.e. controls, policies, owners, risks, etc.)

* Developing, documenting and implementing technical documentation, policies, guidelines, training, dashboards, metrics and presentations

* Actively coordinating with information security to ensure effective monitoring of systems and restrictions environment

* Being the point of contact for all issues regarding the handling of of ePHI / PHI via processes, approvals, requests, etc.

* Conducting a thorough investigation of incidents if PHI / ePHI has been breached

* Other duties as needed

Required Skills: "Must" have these skills to be minimally qualified

* 5+ years of experience in HIPAA compliance, health data security and privacy, or health information systems

* Understanding of HIPAA Compliance regulatory requirements for covered entities and business associates

* Experience conducting risk assessments, answering questions on policies, tracking violations and creating documentation

* Demonstrate attention to details

* Demonstrate excellent analytical, communication and coordination skills

* Ability to effectively document processes, plans and issues in detail

* Ability to analyze large data sets with a high level of accuracy

* Ability to work in a collaborative environment, including receiving guidance and direction from Team Leads, especially the HIPAA Compliance Program Manager

*Bachelor's degree or equivalent work experience

Desired Skills:

• Comprehensive knowledge of HIPAA, HITECH, and other State and Federal data privacy and security regulations that apply to the healthcare industry

* Experience developing, implementing and maintaining privacy and security PHI/ ePHI policies and procedures

* Experience conducting HIPAA compliance and security awareness training

* Ability to achieve HITRUST CCSFP certification within 3 months of start date

* Knowledge of the healthcare industry (hospital, physician practices, pharmacy, and tertiary care), including payment processes, business office and compliance operations, and the legal/ regulatory environment

* Experience creating a risk management plan to counter vulnerabilities documented during a risk assessment

* Experience creating contingency planning for data to ensure it is recoverable, frequently backed-up and encrypted; This is also includes testing and documenting the back-up and recovery plans

* Alteryx and Tableau experience (or similar tools), including building new data workflows, creating new dashboards, and automating data access

* Executive communication skills

* Master's degree

Shift:

Hours Per Week: