PRIVACY AND SECURITY MANAGER

SIHB Core Competencies

As part of the SIHB team, all employees are expected to embody the following competencies:

·         Commitment to Indigenous and Organizational Values: Everything we do at SIHB is centered on Traditional Indian Medicine. It is our responsibility to maintain cultural integrity in all that we do.

·         Accountability: All employees of SIHB effectively manage their work and the work of their teams. We take ownership of our actions and decisions. We all strive to deliver the highest quality work and care while respecting our teammates and relatives.

·         Collaboration: SIHB is a team-oriented organization. As team members, we share the responsibility of working toward a common purpose. We collaborate with our colleagues across the organization to deliver the highest quality of care and results in alignment with our mission, vision, values, and Theory of Change.

·         Communication: We practice effective and clear communication with staff, relatives, teams, and the community. We demonstrate empathy among each other and with those we serve and transparency in our decision-making.

·         Customer Service Orientation: All employees of SIHB recognize the needs of the diverse community we serve. We put the needs of our relatives first by delivering the highest quality, professional, responsive, and innovative care. Our relatives come first and deserve the best.

Organizational Responsibilities:

·         Hold Indigenous values and practices with respect and integrity

·         Hold yourself accountable to the highest standard by being resourceful, innovative, creative, and solution-oriented

·         Actively participate in organizational activities with the understanding that success is achieved through teamwork.

·         Recognize that communication is central to the organization’s success and actively champion your words and actions to maintain respect for others, encourage constructive feedback, be open to share laughter and acknowledge differences in skills and opinions, all while keeping others’ best intentions in mind.

·         At SIHB, we refer to our customers as Relatives. Our Relatives come first and deserve the best.  Serve the needs of our Relatives first by delivering the highest quality, professional, responsive, and innovative care.

Position Summary:

The Privacy and Security Manager helps mature SIHB’s privacy, governance, risk, and information security practices across the organization. This role supports the protection of PHI, PII, and sensitive organizational information while helping teams translate regulatory and security requirements into practical, sustainable controls.

This position works closely with IT leadership and partners cross-functionally with HIM, Clinical Operations, Data Analytics, HR, Finance, and other departments to embed privacy and security requirements into systems, workflows, vendor relationships, and day-to-day operations.

Organizational Structure/Reporting Relationships:

This position reports to the IT Director and has management responsibility for direct reports. 

Job Responsibilities

·        Lead and support privacy, information security, compliance, and risk management activities.

·        Supervise and develop staff supporting privacy, security, audits, investigations, and incident response.

·        Draft, maintain, and operationalize privacy and information security policies, standards, and procedures.

·        Support HIPAA privacy and security compliance, including investigations, documentation, breach response, and corrective actions.

·        Coordinate risk assessments, audits, remediation plans, and executive-level reporting.

·        Partner with IT and department leaders to embed privacy and security requirements into systems, workflows, and organizational changes.

·        Provide guidance on appropriate access, data handling, PHI/PII protection, and security risk considerations.

·        Support vendor and third-party risk reviews involving access to sensitive data, PHI, or PII.