Description
Position Summary
Evaluates County Fire and HCC Department compliance with HIPAA Security Rule Administrative (
- 164.308), Physical (
- 164.310), and Technical (
- 164.312) Safeguards.
Key Responsibilities
- Review IT administrative policies, governance structures, and security roles/job descriptions for compliance gaps.
- Evaluate physical safeguards — buildings, equipment, intake areas — against
- 164.310 requirements.
- Review technical safeguards including access provisioning, mobile/remote access controls, and third-party data protections.
- Document control gaps at the IT-unit or County-wide level, as applicable.
Requirements
Required Qualifications
- 4+ years of HIPAA Security Rule compliance or healthcare IT security experience.
- Strong knowledge of 45 CFR
- 164.308/.310/.312 and NIST SP 800-53 mapping.
Preferred Qualifications
- CHPS (Certified in Healthcare Privacy and Security) or HCISPP certification.
Travel
Onsite for physical/technical safeguard verification at Arrowhead Regional Medical Center (Colton), County Fire (San Bernardino), and administrative offices in San Bernardino and Colton; remote for policy review and reporting.
