Responsible for the full life cycle management of initiatives that are foundational and essential to building and maintaining the Global US Fresenius Medical Care privacy program.Member of the Global Privacy Assurance Office supporting strategic enhancement of the Global US Privacy Framework and the development, execution and oversight of global Privacy compliance strategies and significant initiativesDevelop insights and maintain transparency globally on Privacy risk for the international US businesses and drive mitigation of high-risk activities.Promote a culture of data compliance across all units of the organization

Responsible for development, implementation, and maintenance of the organization’s Privacy Program. Performed Business Impact Assessments to identify vulnerabilities and mitigate potential risks.Managed Privacy/Security incidents or breaches including reporting and notifications as required.Developed and provided policy and training on HIPPA Privacy and Security Rule requirements and procedures.Standardized Business Associate Agreements and review process.Collaborated with Information Security to review and assess supplier Security Assessment Questionnaire responses.

Managed privacy Incidents, disclosures of business and member information, including Breach notifications, state and federal reporting.Implemented Privacy program components across identified businesses to enhance program and/or adhere to new regulatory requirements.Performed Privacy and/or Security assessments including application reviews and business proposals for offshoring.

Managed specific aspects of information security and risk management for five lines of businesses.Identified, evaluated and provided guidance to business units on specific Information Protection governance categories, including vendor engagement, application security reviews, security posture, business continuity plans and access governance to monitor and maintain accepted risk levels.

Successfully managed and facilitated enterprise wide Role Based Access Control (RBAC) Certification process for 3,300 Managers and Executives for HIPAA compliance.Prepared and presented webinar sessions across enterprise for Certification and Role Change processes.Recognized and assigned to Senior Leadership Team to ensure HIPAA compliance with certification deadlines.Published documentation on role and manager certification process.

Managed staff and performed in multiple capacities in support of cross divisional business and IT audits.Performed on Sarbanes Oxley 404 Team to complete Information Systems requirements for Cigna. Documentation and GAP Analysis, Validation and Testing, Remediation and Attestation.Enhanced matrix relationships and improved unit’s effectiveness and valued contributions.