HIM & Compliance Manager (Hybrid Eligible)

Central Oregon Pediatric Associates (COPA) of Bend, Oregon, the largest pediatric practice in the region, is hiring a full-time HIM and Compliance Manager. This position is eligible for hybrid work.

At COPA, the HIM and Compliance Manager plays an integral role serving patients at our friendly and welcoming medical clinic for children of all ages. The Healthcare Health Information Management (HIM) and Compliance Manager ensures the accurate management, privacy, and security of patient health information, adhering to healthcare regulations like HIPAA and HITECH. This role involves overseeing the collection, storage, and accessibility of patient records while implementing policies that protect data from unauthorized access. The HIM and Compliance Manager conducts regular audits, manages risk through compliance assessments, and addresses any data breaches or violations. They train staff on data privacy and compliance requirements, fostering a culture of regulatory adherence, and collaborate with departments such as IT, legal, and clinical teams. Through comprehensive oversight and reporting, the HIM and Compliance Manager upholds high standards in health information management and regulatory compliance.

The role of the HIM and Compliance Manager will include but is not limited to the following duties:

Ensures the secure, compliant management of patient health information, overseeing data privacy, regulatory adherence, risk assessments, and staff training to maintain high standards in healthcare data protection.

Health Information Management (HIM)

• Oversee the collection, storage, and retrieval of patient health records, ensuring they are complete, accurate, and accessible.
• Develop and implement policies for managing electronic health records (EHR) and other health information systems.
• Maintain data integrity and confidentiality by ensuring records are secure and protected from unauthorized access.
• Coordinate the release of patient information in compliance with legal and regulatory standards.
• Provide ongoing HIM training to ensure accurate and ethical management of health records.

Compliance, Regulatory Adherence and Reporting

• Develop and implement a comprehensive compliance program that includes policies, procedures, and training for all employees to ensure compliance with applicable laws, regulations, and industry standards.
• Collaborate with internal stakeholders & employees to ensure that compliance requirements are incorporated into business processes, systems, and products.
• Provide guidance and support to business units on compliance and risk management matters, including contract negotiations and operational issues.
• Conduct regular audits and assessments to monitor compliance with legal and regulatory requirements.
• Oversee safety committee and coordinate with department managers to report safety incident data and risk mitigation recommendations.
• Ensure compliance with healthcare regulations, such as HIPAA, HITECH, OSHA and other federal or state mandates related to patient privacy and data security.
• Keep up to date with changes in healthcare regulations and incorporate necessary updates into policies and procedures.
• Analyze data to identify trends, improve processes, and increase compliance with regulations.

Risk Management & Training and Education

• Manage compliance-related investigations and incidents, ensuring appropriate corrective actions are taken and documented. Complete grievance and investigation forms, reporting findings for each case presented. Perform ongoing tracking of all grievances and reporting thereafter.
• Identify and assess risks related to patient information management and compliance, implementing strategies to mitigate them.
• Implement corrective actions and preventive measures to address identified issues.
• Educate employees on data privacy, security, and compliance regulations to promote a culture of compliance.
• Train staff in new policies, technologies, and procedures to ensure they stay compliant and efficient.
• Communicate policy changes to staff and ensure understanding and compliance.

Collaboration and Communication

• Work closely with other departments (legal, IT, CEO and clinical teams) to ensure that policies and compliance measures align with overall organizational goals.
• Serve as the primary point of contact for audits, subpoena coordination, inspections, and inquiries related to HIM and compliance.

• Liaise with regulatory bodies, and coordinate and schedule appearances for Providers under subpoena to appear in court, including any production of documents for legal proceedings.
• Performs other duties as assigned.

Qualifications
Education and Certification:

• Bachelor's degree required, degree in Health Information Management or related field or equivalent experience preferred.

Experience:

• Minimum of five years professional experience in health information medical records management. Two years of management or professional leadership role required.
• Minimum two years EMR experience required, Epic EMR experience preferred. Proficient with Microsoft Office Suite.
• Bilingual in Spanish and English a plus.

Physical Requirements:

• Use of clear and audible speaking voice and the ability to hear normal speech level in person, over the telephone or through use of other required technology. Sitting or standing for long periods of time. Frequent repetitive motion includes computer keyboard use, reaching with hands and arms, and walking. Occasional lifting and or moving up to 30 pounds and on rare occasion up to 50 pounds. Specific vision abilities required include viewing computer monitor for long periods of time, close vision, distance vision, color vision, peripheral vision, and depth perception.
• Must be able to wear appropriate personal protective equipment (PPE) as required.

Working Conditions:

• Work inside in a general medical office setting with ergonomically configured equipment.
• The employee is subject to hazards including a variety of physical conditions such as proximity to mechanical parts and chemicals including odors. The employee has been identified as having the likelihood of occupational exposure to blood and other potentially infectious materials, therefore are included in the OSHA Exposure Control Plan with specification for preventing contact with the above materials.
• Regular travel between COPA clinics and business office is required.

In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.

COPA is looking for a candidate with a strong work ethic and a passion for the health of each of our patients. The right candidate will thrive in a private practice where they have the opportunity and flexibility to positively impact the life of a child and their family. If this opportunity resonates with you and you can demonstrate a history of high quality, service-oriented performance, we welcome your application! Please submit a cover letter explaining your desire to work in Pediatrics, your current resume and apply online at www.copakids.com.