Job Description: Privacy and Compliance Officer at Colorado Department of Human Services (CDHS) – Behavioral Health Administration (BHA)

About the Colorado Department of Human Services (CDHS) and Behavioral Health Administration (BHA)

The Colorado Department of Human Services (CDHS) is dedicated to designing and delivering high-quality human and health services that enhance the safety, independence, and well-being of Coloradans. Within CDHS, the Behavioral Health Administration (BHA) focuses on behavioral health initiatives, ensuring compliance with state and federal regulations while protecting privacy and confidentiality. We value a people-first approach, accountability, transparency, ethics, and collaboration to achieve the best outcomes for Colorado residents. CDHS offers rewarding careers with excellent benefits, work-life balance, and opportunities for professional growth.

Note: This position is open to current Colorado residents only.

Job Summary

The Privacy and Compliance Officer at BHA oversees privacy and compliance programs to ensure adherence to state and federal laws, including HIPAA. This role provides risk-based assurance, advice, and insight to BHA offices, manages privacy programs for staff, business associates, and partners, and serves as the primary authority on privacy compliance. Responsibilities include policy development, training, breach investigations, and collaboration with internal and external stakeholders to safeguard protected information.

Work Arrangement: Hybrid (1-4 days in office, at least one in-person meeting per month; subject to change). Standard hours: 8 AM – 5 PM, Monday through Friday.

Key Responsibilities

Risk Management

• Advise BHA on privacy compliance and issues from privacy laws, minimizing data privacy risks and ensuring data confidentiality.
• Provide technical assistance for data protection policies and staff behaviors, including interactions with local, state, and federal agencies.
• Offer expertise on HIPAA implementation and other privacy/data protection legislation at state and local levels.
• Develop and maintain BHA privacy policies, procedures, and tools in line with state and federal statutes.
• Review and monitor business associate, data protection, and security agreements for compliance, collaborating with the Attorney General’s Office, OSC, and Contracting Division as needed.
• Coordinate with BHA staff to enhance compliance organization-wide.
• Report to the U.S. Department of Health and Human Services on agency compliance levels.
• Maintain logs of compliance findings, recommendations for remediation, and mitigation of non-compliance.
• Serve as the point person for breach responses, including notifications and communications with relevant authorities.

Education and Awareness

• Create and conduct educational programs and ongoing awareness training for BHA workforce, including Divisional HIPAA liaisons.
• Deliver initial and updated training on privacy requirements based on state and federal laws.
• Monitor employee training completion, answer questions, evaluate practices, and adjust training modules as needed.
• Attend BHA and external training to stay current and share best practices.
• Communicate regularly with programs, employees, and agencies on policies, vulnerabilities, risks, and best practices for data security.
• Advise the Communication Officer and DC of Administration on privacy topics.
• Assist in responding to media inquiries and developing privacy-related communications.
• Guide BHA staff on program-specific privacy communication materials.
• Handle public relations matters related to privacy.

Other Duties

• Develop standard operating procedures and provide technical assistance on privacy issues.
• Offer analysis, training, and support to managers on rules, processes, and compliance with external entities.
• Represent BHA on state and federal legislation issues related to privacy compliance.
• Prepare materials for funding requests, justifications, and compliance reporting.
• Perform additional duties related to data privacy as assigned.

Minimum Qualifications

• Experience Only: Seven (7) years of relevant experience in:
  • HIPAA compliance and data standards, including data privacy.
  • Federal and state statutory/legislative requirements.
  • Developing and maintaining privacy and compliance program documentation and processes.
  • Strong collaboration skills.
• Education and Experience: A combination of related education (associate’s or bachelor’s degree) and relevant experience equaling seven (7) years in the areas listed above.

Preferred Qualifications

• Managing data sharing/use agreements.
• Assessing third-party vendor privacy risks.
• Experience training on HIPAA compliance for staff at all levels.

Conditions of Employment

• Hybrid position requiring a distraction-free home office with internet (and possibly phone).
• Standard background check: Name check, TRAILS, CMS, and JBITS.
• Current/valid unrestricted U.S. Driver’s License.
• Travel to meetings and conferences as needed.
• Former state employees with disciplinary termination or resignation in lieu must disclose and explain.
• Appeal rights available per state regulations.

Benefits

CDHS offers a comprehensive benefits package, including:

• Strong retirement benefits: PERA Defined Benefit or Contribution Plan, plus 401(k) and 457 plans.
• Medical, dental, and health plans with employer-supplemented Health Savings Account.
• Paid life insurance.
• Short- and long-term disability coverage.
• 11 paid holidays per year, plus vacation and sick leave.
• Employee discount program (BenefitHub).
• Employee Wellness program (MotivateMe).
• Flexible schedules, training, and remote work for eligible positions.
• Potential eligibility for Public Service Loan Forgiveness Program.

Application Details

• How to Apply: Refer to the official posting for application instructions.
• Assessment Process: Details available in the job posting.
• Equal Opportunity: The State of Colorado is an equal opportunity employer. We encourage applications from diverse backgrounds and provide ADAA accommodations.
• Technical Support: Toll-free applicant support available.
• For questions, contact Stacy.Chinea@state.co.us.

Why Join