Experience and Skill Set Requirements
| Public Sector Experience | 2 years of experience working in the healthcare industry Knowledge of personal health information protection legislative requirements and how they apply to developing and maintaining healthcare systems containing personal health |
| Technical Skills | 5 years of experience as a privacy expert including: Managing privacy risks in the collection use and disclosure of assessment information within and between HSPs Leading end-to-end operational risk assessments including selecting risk methodologies identifying privacy compliance gaps priorities dependencies and redundancies and recommending process remediation or simplification implementing information privacy best practices in the operation of healthcare systems containing personal health information Developing implementing and operating information security and privacy risk management programs based on the ISO/IEC 17799/27001/27799 standards including strategic planning benefits-driven approaches performance evaluations and implementation plans Implementing information security and privacy best practices including but not restricted to risks to the security of data (such as financial information) and risks to the privacy of personal information Experience with commonly used business software (e.g. word processing spreadsheet database management in order to develop complete systems user and operations documentation |
| Privacy Impact Assessment (PIA) Skills | Extensive experience in conducting conceptual logical and physical Privacy Impact Analysis (PIAs) Threat Risk Analysis (TRAs); Experience in testing privacy and security functions Extensive experience of implementing and operating security technologies and conducting vulnerability assessments and penetration testing |
| Stakeholder Engagement and Communication Skills | Proven track record for building strong working relationships Strong interpersonal and verbal and written communication skills Excellent customer service skills including tact and diplomacy to ensure client needs are managed effectively Excellent analytical problem-solving and decision-making skills Ability to apply strong listening skills to facilitate issue resolution A motivated flexible creative team player with perseverance excellent multi-tasking abilities and a proven track record for meeting strict deadlines |
MUST HAVES:
- Leading end-to-end operational risk assessments including selecting risk methodologies identifying privacy compliance gaps priorities dependencies and redundancies and recommending process remediation or simplification implementing information privacy best practices in the operation of healthcare systems containing personal health information
- Developing implementing and operating information security and privacy risk management programs based on the ISO/IEC 17799/27001/27799 standards including strategic planning benefits-driven approaches performance evaluations and implementation plans
Experience and Skill Set Requirements Public Sector Experience 2 years of experience working in the healthcare industry Knowledge of personal health information protection legislative requirements and how they apply to developing and maintaining healthcare systems containing personal hea...
Experience and Skill Set Requirements
| Public Sector Experience | 2 years of experience working in the healthcare industry Knowledge of personal health information protection legislative requirements and how they apply to developing and maintaining healthcare systems containing personal health |
| Technical Skills | 5 years of experience as a privacy expert including: Managing privacy risks in the collection use and disclosure of assessment information within and between HSPs Leading end-to-end operational risk assessments including selecting risk methodologies identifying privacy compliance gaps priorities dependencies and redundancies and recommending process remediation or simplification implementing information privacy best practices in the operation of healthcare systems containing personal health information Developing implementing and operating information security and privacy risk management programs based on the ISO/IEC 17799/27001/27799 standards including strategic planning benefits-driven approaches performance evaluations and implementation plans Implementing information security and privacy best practices including but not restricted to risks to the security of data (such as financial information) and risks to the privacy of personal information Experience with commonly used business software (e.g. word processing spreadsheet database management in order to develop complete systems user and operations documentation |
| Privacy Impact Assessment (PIA) Skills | Extensive experience in conducting conceptual logical and physical Privacy Impact Analysis (PIAs) Threat Risk Analysis (TRAs); Experience in testing privacy and security functions Extensive experience of implementing and operating security technologies and conducting vulnerability assessments and penetration testing |
| Stakeholder Engagement and Communication Skills | Proven track record for building strong working relationships Strong interpersonal and verbal and written communication skills Excellent customer service skills including tact and diplomacy to ensure client needs are managed effectively Excellent analytical problem-solving and decision-making skills Ability to apply strong listening skills to facilitate issue resolution A motivated flexible creative team player with perseverance excellent multi-tasking abilities and a proven track record for meeting strict deadlines |
MUST HAVES:
- Leading end-to-end operational risk assessments including selecting risk methodologies identifying privacy compliance gaps priorities dependencies and redundancies and recommending process remediation or simplification implementing information privacy best practices in the operation of healthcare systems containing personal health information
- Developing implementing and operating information security and privacy risk management programs based on the ISO/IEC 17799/27001/27799 standards including strategic planning benefits-driven approaches performance evaluations and implementation plans
View more
View less