Heather Havens

About Heather Havens

Results-driven compliance professional who combines a passion for problem-solving with an analytical mind to develop and implement compliance programs. Compliance: HIPAA, HITRUST CSF, SOC 2, business continuity planning and testing, incident response, legal research, policy and procedure development, security awareness and privacy training, third-party risk management

Experience

1. Governance, Risk & Compliance Manager

   Elixir Technologies

   Oct 2014 — Present · Ojai, CA, US

   Selected Contributions:Managed evidence collection, review, and presentation to pass SOC 2 audit with no deficiencies noted.Achieved multiple terms of HITRUST certification in 2018, 2020, 2022, and 2024 performing among top 5% of companies on HITRUST Validated Assessments. Reduced HITRUST corrective action plans from 28 in 2020 to none in 2024.Assigned to low-risk vendor tier and moved from annual to three-year audit cycle for leading healthcare payer.Policies and procedures awarded 100% maturity ratings during 2024 HITRUST Validated Assessment.Duties:Manage HITRUST Validated and Interim assessments. Facilitate internal and external audits by assembling documentation and managing activities of Security Team.Develop and update data privacy and security policies and procedures to comply with international, federal, and state regulatory requirements.Perform annual risk assessments and testing of business continuity, disaster recovery, and incident response plans, building resiliency to respond to COVID-19 pandemic from 20••••22.Lead global security and privacy training program for 225 employees, achieving 90% pass rate for participating employees.Communicate data privacy and security compliance requirements to Board of Directors and other stakeholders during annual reports and regular security reminders.

Education

• University of Washington

  Master's Degree, English

  1997 — 1999

• UC Santa Barbara Extension (ABA-approved)

  Certificate, Paralegal Studies

  2011 — 2012

• University of California, Santa Cruz

  BA, English Literature

  1995 — 1997

Skills

• Civil Litigation
• Patent Litigation
• Employment Law
• Legal Compliance
• Attorneys
• Microsoft Word
• Document Preparation
• Legal Writing
• Litigation
• Document Review
• Proofreading
• Legal Assistance
• Lexis
• Westlaw
• Word
• Legal Documents
• Grant Writing
• Copywriting
• Courts
• Editing
• Legal Research
• Filing
• Office Management
• Outlook
• Administrative Assistants
• Administration
• Curriculum Design
• Social Media
• Litigation Support
• Education Law
• Internet Law
• Research
• Legal Translation
• Contract Law
• Powerpoint
• Microsoft Excel
• Trademarks
• Microsoft Office
• Transcription
• E-Learning