A manager who owns the security of patient data inside a healthcare organization.
What they do
- Develop and implement the protocols that protect patient data
- Run regular risk assessments across information systems and infrastructure
- Keep those protocols within HIPAA, GDPR and the other data protection laws
- Manage security incidents when they happen
- Train healthcare staff on the protocols they have to follow