Health Data Information Security Manager

The information security manager serves as the process owner for all ongoing activities related to the availability, integrity, and confidentiality of the patient, provider, employee, and business information in compliance with the health care organization’s information security policies and procedures.

Responsibilities

• Documents the information security policies and procedures instituted by the organization’s Information Security Committee
• Implements the organization’s information security policies and procedures
• Coordinates the activities of the Information Security Committee
• Provides direct information security training to all employees, contractors, alliances, and other third parties
• Monitors compliance with the organization’s information security policies and procedures among employees, contractors, alliances, and other third parties and refers problems to appropriate department managers or administrators
• Monitors internal control systems to ensure that appropriate information access levels and security clearances are maintained
• Performs information security risk assessments and serves as the internal auditor for information security processes
• Prepares the organization’s disaster recovery and business continuity plans for information systems
• Serves as an internal information security consultant to the organization
• Monitors advancements in information security technologies
• Monitors changes in legislation and accreditation standards that affect information security
• Initiates, facilitates, and promotes activities to foster information security awareness within the organization
• Serves as the information security liaison for users of clinical, administrative, and behavioral systems
• Reviews all system-related information security plans throughout the organization’s network and acts as a liaison to the Information Systems Department

Qualifications

• Baccalaureate degree in health information management or a related field
• Certification as a RHIA or RHIT
• Experience in project management and change management
• Knowledge of information security and access technologies
• Knowledge of database applications, spreadsheet design, and report writing software