Ryan Artz

About Ryan Artz

As an Associate Director, Audit & Compliance at Banner Health, I drive operational excellence and compliance through a comprehensive HIPAA audit program that covers a multi-matrixed organization of personnel. I develop and present acute narratives to senior leadership, support personnel in improving enterprise maturity, and leverage the organizational data to generate meaningful use audit reports for internal assurance and additional funding. In previous healthcare leadership roles, I also acted as the designated security official for the organization, as prescribed by §164.308(a)(2). With 9+ years of experience in information security and privacy, I have a proven track record of delivering quality service and innovative operational efficiency, while reducing costs and contributing to company growth and expansion. I have expertise in policy development, risk assessment, business impact analysis, process optimization, vendor management, project management, and solution deployment, aligned with various frameworks and standards, such as ISO27001, HiTrust, NIST, and SOC2. I am also pursuing a PhD in Leadership with a specialty in Digital Forensics and Information Systems Security at the University of the Cumberlands, where I have already completed two master\'s degrees in the same fields. I hold multiple certifications, such as CISM, CISA, CDPSE, CRISC, CCSFP, and ISO27k - LI. My goal is to leverage my skills and knowledge to enhance the security and privacy posture of organizations and protect their data and assets from threats and breaches.

Experience

1. Associate Director, Audit & Compliance Director - Central Wyoming Hospitals

   Banner Health

   Dec 2019 — Present · Casper, WY, US

   HIPAA Part 164 Subpart C (Security Rule) Audit & Compliance Program: Drove operational excellence through the development of an internal HIPAA audit program, from scratch, to demonstrate and improve compliance through a multi-matrixed organization of personnel. Developed an audit charter to overlay the security rule subsections and generate acute narrative to be presentable to senior leadership. Supported personnel in developing actionable plans and strategies improving enterprise maturity. Leveraged the organizational narrative to generate meaningful use audit reports for internal assurance and additional funding. Acted as designated security official for Wyoming Medical Center (§164.308(a)(2)) HIPAA Part 164 Subpart E (Privacy) Audit & Compliance Program: As a proponent of insourcing the audit and assurance program, developed a continually improving privacy program which reviews 49 Privacy rule elements including: Breach Notifications, Administrative Requirements, Accounting of Disclosures, NPP, etc. Developed comprehensive testing approaches and program standardization language to generate consistent, comprehensible, compliance reports which are commonly used to send to external entities. HiTRUST Program Development: Developed comprehensive and extended policies which align the HiTrust control catalogue against the organizations current security toolset. Identified key gap areas and worked with key business owners to develop action plans to improve gaps and come into compliance. Leveraged and created key committees to review and approve the appropriate documentation to generate cross-departmental support. Exception Management: Developed an exception management program and was the exception management leader to help identify key risk areas pervasive within the organization. Leveraged the program to help drive continual improvement and generate actionable plans for stakeholders so they may formally adopt program requirements.

Education

• University of the Cumberlands

  Doctor of Philosophy - PhD, Leadership, Specialty: Digital Forensics and Information Systems Security

  2020 — 2024

• University of the Cumberlands

  Master of Science (M.Sc.), Digital Forensics

• Central Washington University

  Bachelor of Applied Science (B.A.Sc.), IT Management

  2015 — 2017

• University of the Cumberlands

  Master of Science (M.Sc.), Information Systems Security/Information Assurance

• Edmonds College

  Associate of Technical Arts (A.T.A.), Computer Information Systems

  2012 — 2014