State of Michigan Civil Service Commission Capitol Commons Center, P.O. Box 30002 Lansing, MI 48909 Position Code 1. STDDADM1 POSITION DESCRIPTION This position description serves as the official classification document of record for this position. Please complete the information as accurately as you can as the position description is used to determine the proper classification of the position. 2. Employee's Name (Last, First, M.I.) 8. Department/Agency MDHHS-COM HEALTH CENTRAL OFF 3. Employee Identification Number 9. Bureau (Institution, Board, or Commission) Compliance Office 4. Civil Service Position Code Description 10. Division State Administrative Manager-1 5. Working Title (What the agency calls the position) 11. Section Manager, Privacy and Compliance Section Privacy and Compliance Section 6. Name and Position Code Description of Direct Supervisor 12. Unit VACANT; SENIOR POLIC EXECUTIVE 7. Name and Position Code Description of Second Level Supervisor 13. Work Location (City and Address)/Hours of Work VREIBEL, NANC; SENIOR CHIEF DEPUT DIRECTOR 21 Lansing, MI / Monday-Friday, 8:00-5:00 14. General Summary of Function/Purpose of Position This position directs the day-to-day activities of the privacy and compliance section within the Compliance Office. This position is responsible for identifying, designing, and executing privacy and compliance internal controls, policies, and procedures to ensure the Department s compliance with privacy, regulatory agency requirements third-party guidelines, and internal policies and procedures. This includes, among others, the Health Insurance Portability and Accountability Act (HIPAA), 42 CFR Part 2, the Michigan Public Health Code, the Michigan Mental Health Code, Title VI,, and the Affordable Care Act.
15. Please describe the assigned duties, percent of time spent performing each duty, and what is done to complete each duty. List the duties from most important to least important. The total percentage of all duties performed must equal 100 percent. Duty 1 General Summary: Percentage: 35 Plan, organize, and direct the privacy-related activities of the section Plans, organizes, and directs the work of privacy compliance staff to ensure the Department s compliance with local, state, and federal laws and regulations, third-party guidelines, and internal policies and procedures, including, among others, the Health Insurance Portability and Accountability Act (HIPAA), 42 CFR 2, Michigan s Public Health Code, and Michigan s Mental Health Code Identify privacy-related compliance risks across the Department and in specific Departmental programs and implement effective risk management and mitigation strategies Assess HIPAA s applicability to Departmental programs on an on-going and as-needed basis to maintain the Department s status as a HIPAAhybrid entity Confer with the Chief Compliance Officer, Department leadership, Legal Affairs Administration, and program management and staff as needed to ensure effective risk management and mitigation strategies Direct the preparation, compilation, and delivery of education, guidance, and tools to assist Department staff in understanding and carrying out privacy-related compliance objectives Oversees, and as necessary carries out, the handling of privacy breach investigations; coordinates as needed with the security section Maintain HIPAA and other compliance-related documentation Monitor privacy compliance across the Department s administrations Direct the development and implementation of privacy-related policies and procedures, revising as needed to comply with changes in law or policy Develop and implement processes to assess the effectiveness of the section s activities Duty 2 General Summary: Percentage: 35 Plan, organize, and direct the compliance-related activities of the section Plans, organizes, and directs the work of compliance staff to ensure the Department s compliance with local, state, and federal laws and regulations, third-party guidelines, and internal policies and procedures, including, among others, Title VI, and the Affordable Care Act Confer with the Chief Compliance Officer, Department leadership, Legal Affairs Administration, Human Resources, and program management and staff in order to provide guidance and direction on compliance issues Identify compliance risks across the Department and in specific Departmental programs and implement effective risk management and mitigation strategies Direct the preparation, compilation, and delivery of education, guidance, and tools to assist Department staff in understanding and carrying out regulatory agency compliance. Maintain required compliance documentation Assist Departmental programs with development, maintenance of, and compliance with Title VI plans Develop and monitor the Department s compliance plan Direct the development and implementation of compliance-related policies and procedures, revising as needed to comply with changes in law or policy Develop and implement processes to assess the effectiveness of the section s activities Duty 3 General Summary: Percentage: 25
Supervise section staff Supervise the day-to-day activities of section staff Coordinate section work by scheduling assignments and guiding the work of direct reports Conduct staff meetings as needed to discuss operating problems, section work, personnel matters, technical programs, and the status of work and projects Duty 4 General Summary: Percentage: 5 Other duties as assigned 16. Describe the types of decisions made independently in this position and tell who or what is affected by those decisions. The independent decision-making required in this position includes exercising sound judgment and critical thinking in addressing Department-wide and program-specific risk, analyzing such risk, and developing and implementing appropriate risk mitigation strategies to ensure the department's compliance with applicable privacy and compliance-related local, state, and federal laws and regulations, third-party guidelines, and internal policies and procedures. These decisions potentially affect the entire department. 17. Describe the types of decisions that require the supervisor's review. Decisions that affect the entire Department, those that present the acceptance of significant risk, and those that require input from Department Leadership. 18. What kind of physical effort is used to perform this job? What environmental conditions in this position physically exposed to on the job? Indicate the amount of time and intensity of each activity and condition. Refer to instructions. The work is performed in a typical office setting requiring some sitting, standing, bending and the extended use of a personal computer. 19. List the names and position code descriptions of each classified employee whom this position immediately supervises or oversees on a fulltime, on-going basis. NAME CLASS TITLE NAME CLASS TITLE NIGHSWANDER, THOMAS E DEPARTMENTAL ANALST- E P11 Additional Subordinates Departmental Analyst MOBLE, ERIN M DEPARTMENTAL ANALST- E P11 20. This position's responsibilities for the above-listed employees includes the following (check as many as apply): Complete and sign service ratings. Assign work. Provide formal written counseling. Approve leave requests. Approve work. Review work. Approve time and attendance. Provide guidance on work methods. Orally reprimand. Train employees in the work. 22. Do you agree with the responses for items 1 through 20? If not, which items do you disagree with and why? es. 23. What are the essential functions of this position? This position directs the day-to-day activities of the privacy and compliance section within the Compliance Office. This position is responsible for identifying, designing, and executing privacy and compliance internal controls, policies, and procedures to ensure the Department s compliance with privacy, regulatory agency requirements third-party guidelines, and internal policies and procedures.
24. Indicate specifically how the position's duties and responsibilities have changed since the position was last reviewed. New position. 25. What is the function of the work area and how does this position fit into that function? The function of the Privacy and Compliance Section is to direct the implementation of MDHHS privacy and compliance efforts 26. What are the minimum education and experience qualifications needed to perform the essential functions of this position. EDUCATION: Possession of a bachelor s degree in any major. EXPERIENCE: State Administrative Manager 15 Four years of professional experience, including two years equivalent to the experienced (P11) level or one year equivalent to the advanced (12) level. Alternate Education and Experience State Administrative Manager 15 Education level typically acquired through completion of high school and two years of safety and regulatory or law enforcement experience at the 14 level; or, one year of safety and regulatory or law enforcement experience at the 15 level, may be substituted for the education and experience requirements. KNOWLEDGE, SKILLS, AND ABILITIES: Ability to instruct, direct, and evaluate employees. Experience with and thorough knowledge of compliance-related activities and industry standards, especially relating to privacy and compliance. Ability to plan, direct, and coordinate program and administrative activities of a complex, interrelated, and interdependent nature, where unknowns and numerous contingency factors are involved. Ability to work effectively in teams in support of common objectives and to generate understanding and support of Department s compliance-related needs and interests. Excellent communication skills, verbal and written. CERTIFICATES, LICENSES, REGISTRATIONS: None. NOTE: Civil Service approval does not constitute agreement with or acceptance of the desired qualifications of this position. I certify that the information presented in this position description provides a complete and accurate depiction of the duties and responsibilities assigned to this position. Supervisor TO BE FILLED OUT B APPOINTING AUTHORIT Indicate any exceptions or additions to the statements of employee or supervisors. None I certify that the entries on these pages are accurate and complete. CATHERINE LANE Appointing Authority 9/22/2016
I certify that the information presented in this position description provides a complete and accurate depiction of the duties and responsibilities assigned to this position. Employee