Full-Time
Posted on 9/9/2026
Nonprofit health system operating hospitals
$35.37 - $58.95/hr
Greeley, CO, USA
Remote
Visits cover Greeley and surrounding areas.
Bachelor's
See people who can refer or advise you
Banner Health is a nonprofit health care system that operates a large network of hospitals, clinics and related services across six western states. It delivers integrated care through its hospitals, Banner Health Network and affiliated physician groups, offering primary, specialty, urgent, long-term and in-home care that connect across care settings. As a large nonprofit with a broad scope—from acute-care hospitals to home and long-term care—profits are reinvested into community health rather than distributed. Its goal is to provide broad, accessible, coordinated health care across six states to improve community health outcomes and patient experience.
Company Size
10,001+
Company Stage
N/A
Total Funding
N/A
Headquarters
Phoenix, Arizona
Founded
1999
See people who can refer or advise you
Help us improve and share your feedback! Did you find this helpful?
Health Insurance
Dental Insurance
Vision Insurance
Life Insurance
401(k) Company Match
Pet Insurance
Legal Services
HIPAA Privacy and security rules: what actually gets enforced. A $4.75 million wake-up call nobody expected. In 2022, a single stolen laptop cost a health system millions. Not because the laptop was valuable - because the ePHI on it wasn't encrypted. The Office for Civil Rights (OCR) at HHS investigated and found a cascade of failures under both the HIPAA privacy and security rules. No current risk analysis. No device-level encryption policy. No documentation showing anyone had even considered these basics. That's the case of Banner Health, which paid $1.25 million after a breach affecting nearly 3 million people. It followed a pattern I've seen over two decades of consulting: organizations that treat the privacy and security rules as separate checklists instead of an integrated system. This post breaks down what the HIPAA privacy and security rules actually require, how OCR enforces them, and the specific steps that separate organizations that thrive from those that write settlement checks. What are the HIPAA Privacy and security rules? The HIPAA Privacy Rule governs who can access, use, and disclose protected health information (PHI) in any form - paper, verbal, or electronic. It establishes patients' rights over their health data and sets limits on what covered entities and business associates can do with it. The HIPAA Security Rule narrows the focus to electronic PHI (ePHI). It requires covered entities to implement administrative, physical, and technical safeguards to ensure the confidentiality, integrity, and availability of ePHI. You can read the full regulatory text at 45 CFR Part 164. Think of it this way: the Privacy Rule tells you what to protect and when you can share it. The Security Rule tells you how to protect it when it lives on a server, laptop, or cloud platform. Where most organizations trip up. In my experience, the confusion starts when people treat these as two separate compliance projects. They're not. A nurse who accesses a patient record without authorization violates the Privacy Rule. But the system that let her access it without proper controls? That's a Security Rule failure. OCR investigates both simultaneously, and penalties stack. I've audited behavioral health clinics, pharmacies, and large hospital systems. The mistake is almost always the same: policies exist on paper, but nobody trained the staff, and nobody tested the controls. The Privacy Rule: more than a Notice on a clipboard. Every covered entity posts a Notice of Privacy Practices. Most patients ignore it. But the Privacy Rule's requirements go far deeper than that notice. Minimum necessary standard. Your workforce should only access the PHI they need for their specific job function. A billing coordinator doesn't need therapy notes. A front desk receptionist doesn't need lab results. If your EHR gives everyone the same access level, you have a minimum necessary problem - and it's one of the most common Privacy Rule violations I encounter. Patient rights that create real obligations. The Privacy Rule gives patients the right to access their records, request amendments, and receive an accounting of disclosures. Under the HHS Right of Access Initiative, OCR has aggressively enforced patients' access rights since 2019. Settlements in these cases have ranged from $3,500 to $240,000 - often against small practices that simply didn't respond to record requests within 30 days. If you're running a nursing team or a behavioral health practice, your staff needs to know these timelines cold. Its HIPAA training for nurses in clinical workflow covers these obligations in detail, mapped to the actual scenarios your team faces daily. The Security Rule organizes its requirements into three categories. Every one of them has produced enforcement actions. Administrative safeguards. This is where the risk analysis lives - and where the majority of OCR penalties land. A risk analysis isn't a one-time checklist. It's an ongoing, documented process that identifies threats to ePHI, evaluates your current controls, and drives remediation. I've reviewed risk analyses that were three pages long and covered nothing. I've also seen 200-page documents that no one in leadership had ever read. Both fail. What OCR wants is evidence that your organization identified real threats, assigned someone to fix them, and followed up. Physical safeguards. Workstation security, device disposal, facility access controls. Think about every laptop, tablet, and desktop in your organization. Now think about what happens when an employee leaves. If you don't have a documented process for revoking access and recovering devices, you have a physical safeguard gap. Technical safeguards. Encryption, access controls, audit logs, transmission security. Encryption is addressable under the Security Rule, which means you can choose not to encrypt - but you must document why and implement an equivalent measure. In practice, I've never seen an organization successfully argue that encryption wasn't reasonable. Just encrypt everything. How OCR actually enforces the HIPAA Privacy and security rules. OCR enforcement follows a predictable pattern. A breach gets reported. OCR investigates. They find not just the breach itself but the underlying compliance failures that enabled it. The Anthem lesson: $16 million. In 2018, Anthem Inc. paid $16 million to settle HIPAA violations after a cyberattack exposed nearly 79 million records. OCR found that Anthem had failed to conduct an enterprise-wide risk analysis, failed to implement sufficient procedures to review information system activity, and failed to identify and respond to suspected or known security incidents. Every one of those failures maps to a specific Security Rule standard. Penalty tiers you should know. OCR uses a four-tier penalty structure based on the level of culpability: * Tier 1 (Did not know): $137 to $68,928 per violation * Tier 2 (Reasonable cause): $1,379 to $68,928 per violation * Tier 3 (Willful neglect, corrected): $13,785 to $68,928 per violation * Tier 4 (Willful neglect, not corrected): $68,928 to $2,067,813 per violation These amounts are adjusted annually for inflation. When you have hundreds or thousands of affected records, each one can constitute a separate violation. The math gets catastrophic fast. Workforce training: the cheapest insurance you're probably skipping. Both the Privacy Rule and the Security Rule require workforce training. Not suggested - required. And not just at onboarding. The Security Rule at 45 CFR § 164.308(a)(5) mandates ongoing security awareness training and periodic reminders. Here's what I've seen consistently: organizations that invest in role-specific training have fewer breaches, faster incident response times, and dramatically better outcomes if OCR comes knocking. Generic annual training videos don't cut it. A pharmacy technician faces different PHI risks than a psychiatric nurse practitioner. That's why role-specific programs matter. Its HIPAA and HITECH training for pharmacy professionals addresses the unique handling requirements for prescription data and third-party disclosures. For behavioral health settings, its HIPAA training for mental and behavioral health goes deep on 42 CFR Part 2 crossover issues and psychotherapy note protections. The Breach Notification Rule ties it all together. When a breach of unsecured PHI happens, the Breach Notification Rule kicks in. You must notify affected individuals within 60 days, notify HHS, and - if the breach affects 500 or more people - notify prominent media outlets in the affected jurisdiction. This is the rule that makes everything public. Every breach of 500+ records appears on the HHS Breach Portal, sometimes called the "Wall of Shame." Once your organization's name appears there, patients, partners, and payers all see it. I've watched organizations spend more on breach notification logistics - printing, mailing, call centers - than they would have spent on the controls that would have prevented the breach in the first place. Your compliance checklist for 2026. If you do nothing else this quarter, tackle these five items: * Update your risk analysis. If it hasn't been revised in the last 12 months, it's stale. * Audit user access. Review who has access to what, and revoke anything that violates the minimum necessary standard. * Encrypt all ePHI at rest and in transit. No exceptions, no excuses. * Train by role. Generic training fails. Match training content to the actual PHI your staff handles. * Test your breach response plan. Run a tabletop exercise. Time your response. Document the results. The real cost of getting the HIPAA Privacy and security rules wrong. The financial penalties grab headlines. But the real damage is operational. I've seen practices lose referring physicians because of a publicized breach. I've watched health systems spend 18 months under a corrective action plan that consumed their compliance team's entire bandwidth. Getting the HIPAA privacy and security rules right isn't about perfection. It's about documented, ongoing effort. OCR doesn't expect you to be breach-proof. They expect you to have tried - genuinely, with evidence - to protect the PHI your patients trusted you with. That effort starts with knowing what the rules actually say, training your workforce to follow them, and building a culture where compliance isn't a department - it's a reflex. Explore its full HIPAA training catalog to find the right program for your team. Carl B. Johnson. Healthcare Chief Information Security Officer (CISO), Virtual Privacy Officer and HIPAA Compliance Educator and National Speaker on Healthcare Privacy & Security
Two Banner Health hospitals named to Becker's 100 Great Hospitals list for 2026. Banner Health announced on Aug. 24 that two of its hospitals have been included in the 2026 Becker's Hospital Review list of 100 Great Hospitals in America. The recognition highlights both the reputation and outcomes of these institutions, according to Banner Health. "This recognition belongs to every clinician, nurse, and team member who has chosen to bring their best to work every single day," said Benjamin Schwartz, MD, president of academic delivery for Banner Health. "It tells the country what we already know: that the care being delivered at Banner Health is among the finest anywhere in the nation. That is something worth celebrating, and something worth protecting." Banner - University Medical Center Phoenix was recognized for several achievements including hosting the world's busiest total artificial heart program and Arizona's largest heart transplant program. The hospital is nationally ranked by U.S. News & World Report for Geriatrics and recently received its fifth consecutive Magnet redesignation. It admits approximately 36,000 patients annually and has a newly opened neurocritical care unit. Additionally, it supports around 500 residents and fellows across 50 programs with recent expansions aimed at addressing Arizona's healthcare workforce needs. Banner - University Medical Center Tucson was ranked as the region's top hospital by U.S. News & World Report for a fourth year in a row. The hospital leads initiatives such as the Valley Fever Research Center and partners with Banner Alzheimer's Institute on research efforts while operating one of only two burn centers statewide. It remains Tucson's only Magnet-certified hospital and provides integrated pediatric care through Banner Children's at Diamond Children's Medical Center. For three consecutive years, an independent survey certified Banner as a Great Place to Work, with Forbes and U.S. News & World Report also recognizing its Arizona hospitals among the state's best. Banner Health operates as a nonprofit health system serving communities across Arizona, California, Colorado, Nebraska, Nevada, and Wyoming; it ranks among the nation's largest nonprofit systems and aims to simplify health care while providing substantial community benefits through reinvestment into research and facilities, according to the official website.
Banner - University Medicine names Charles Socci chief operating officer. Veteran health care executive to oversee Tucson hospital operations TUCSON, Ariz. (Aug. 18, 2026) - Banner - University Medicine has named Charles Socci, RN, MBA, chief operating officer in Tucson, effective Sept. 14. Socci will oversee day-to-day operations of Banner - University Medicine's acute-care hospitals in Tucson, working alongside teams to advance quality, patient safety, service excellence, team engagement and fiscal stewardship. He will also play a key role in supporting the hospitals as they continue to meet the health care needs of southern Arizona. Socci brings more than 20 years of health care leadership experience in complex academic health systems, with a background in large-scale operational transformation, multi-facility operations, enterprise service line strategy, post-merger integration and capital planning. Prior to joining Banner - University Medicine, Socci served as vice president of heart, vascular, thoracic and musculoskeletal service lines, leading ambulatory operations across multiple hospitals and outpatient locations at Froedtert & the Medical College of Wisconsin. Before that, he held senior roles in clinical and service line operations at University of Utah Health. About Banner Health As one of the nation's largest fully integrated nonprofit health systems, Banner Health is pioneering a sustainable care model that prioritizes prevention, manages chronic disease, and reduces health spending - succeeding when patients stay healthy, not when they get sick. Banner Health operate 33 hospitals and more than 400 sites across six states, delivering seamless care from primary to quaternary medicine, including health insurance, physician networks, world-renowned specialty services, and behavioral health. Accountable to the communities Banner Health serve, Banner Health reinvest every dollar into advancing care, research, and facilities, providing more than $1 billion each year in community benefit. Through its partnership with the University of Arizona, Banner Health drive clinical discoveries across more than 800 trials and train more than 1,300 residents and fellows annually. Headquartered in Arizona, Banner Health serve Arizona, California, Colorado, Nebraska, Nevada, and Wyoming. Its hospitals are consistently ranked among Arizona's top-performing by U.S. News & World Report. For more information, visit bannerhealth.com/about. Download assets from the story. Charles Socci YOU MAY ALSO LIKE Aug 06, 2026 Jul 27, 2026 Jul 22, 2026
Neurosurgery / Physical Medicine & Rehabilitation | Banner Health. Banner Health Phoenix, AZ Neurosurgery / Physical Medicine & Rehabilitation Interventional Spine & Pain Physician Banner University Medical Group Phoenix Scottsdale Health Center Plus | Scottsdale, Arizona Banner University Medical Group Phoenix, in partnership with the University of Arizona College of Medicine Phoenix, is seeking a Board Certified/Board Eligible Physical Medicine & Rehabilitation Physician with fellowship training in Interventional Spine and Pain Medicine to join the growing Scottsdale Spine Program. This is an outstanding opportunity to become part of an integrated, multidisciplinary spine program serving one of Arizona's fastest-growing communities. The successful candidate will work collaboratively with neurosurgeons, rehabilitation specialists, therapists, advanced practice providers, and other specialists to provide comprehensive, evidence-based spine care focused on improving patient outcomes and quality of life. As part of Banner Health's expanding Scottsdale medical campus, physicians will practice within a state-of-the-art environment designed to deliver coordinated specialty care through close collaboration across neuroscience, musculoskeletal medicine, and rehabilitation services. Opportunity Highlights * Full-time outpatient Interventional Spine and Pain Medicine practice * Advanced interventional spine procedures * Integral role within a multidisciplinary Spine Center * Collaborative surgical and non-surgical spine care model * Opportunity to build and grow a thriving clinical practice * Faculty appointment with the University of Arizona College of Medicine Phoenix * Research, teaching, and program development opportunities * Participation in resident and medical student education * Access to advanced imaging, rehabilitation, and specialty support services Qualifications * Board Certified or Board Eligible in Physical Medicine & Rehabilitation * Fellowship training in Interventional Spine and Pain Medicine * Arizona medical license or eligibility for licensure * Commitment to multidisciplinary, patient-centered care * Interest in academic medicine and program development Scottsdale Health Center Plus Banner Health is investing in the future of healthcare through the development of the new Scottsdale Health Center Plus and medical campus, bringing together specialty care, advanced diagnostics, outpatient surgery, rehabilitation services, and additional programs designed to provide coordinated care close to home. Banner University Medicine Banner University Medicine combines one of the nation's largest nonprofit healthcare systems with the academic excellence of the University of Arizona College of Medicine Phoenix. Physicians enjoy opportunities for clinical innovation, education, research, and multidisciplinary collaboration within a growing academic environment. Join a nationally recognized health system and help shape the future of integrated spine care in Scottsdale and throughout the Phoenix metropolitan area. As an equal opportunity employer, Banner - University Medical Group (BUMG) recognizes the power of culture and community and encourages applications from individuals with varied experiences and backgrounds. BUMG is an EEO Employer. Banner Health complies with applicable federal and state laws and does not discriminate based on race, color, national origin, religion, sex, sexual orientation, gender identity or expression, age, or disability.
Banner Health named among nation's best - again. Three national honors affirm Banner's standing as one of the country's top health systems for clinical quality and patient care PHOENIX (Aug. 10, 2026) - Banner Health, one of the nation's largest fully integrated nonprofit health systems, today announced that multiple hospitals across its system have received prestigious national recognitions in 2026 - further cementing its standing as one of the country's top health systems for clinical quality, patient safety and compassionate care. With awards from Healthgrades, Forbes, and U.S. News & World Report, these honors collectively affirm what patients across Arizona and beyond experience every day: world-class care, close to home. "Behind every national ranking is a person - a nurse who stayed late, a physician who went further, a team member who made a patient feel seen and cared for. Our people are the foundation of everything we do at Banner Health, and clinical excellence is simply what happens when extraordinary individuals show up every day with purpose and heart," said Marjorie Bessel, MD, chief clinical officer at Banner Health. "To be recognized by so many leading organizations in the same year is humbling, but what truly inspires me is knowing that these awards represent the real work of serving our communities: our neighbors, our families, our friends. That is what Banner is built on, and that is what drives us forward." Healthgrades recognizes clinical excellence and patient safety Six Banner Health hospitals have earned 2026 Healthgrades Awards, a distinction based solely on clinical outcomes data. This makes it one of the most objective measures of hospital performance available to patients. These awards help patients identify top-rated hospitals in their communities and signal that Banner consistently delivers care that meets the highest national standards. Banner - University Medical Center Phoenix has earned America's 250 Best Hospitals Award(TM) for 2024, 2025, and now 2026 - placing it in the top 5% of hospitals nationwide for three consecutive years. Meanwhile, Banner Gateway Medical Center, Banner Ironwood Medical Center, Banner North Colorado Medical Center, and Banner - University Medical Center Tucson have earned the new 2026 Healthgrades Awards recognizing superior clinical performance. Additionally, Banner Ocotillo Medical Center received a Patient Safety Excellence Award(TM) for the second consecutive year. This recognition honors hospitals in the top 10% in the nation for patient safety and with the lowest occurrences of 13 preventable patient safety events. Banner recognized on inaugural Forbes Top Hospitals list Numerous Banner Health hospitals also earned a place on the Forbes Top Hospitals by State 2026 list, a significant milestone in the inaugural year of the state-specific designation. The Banner hospitals on the list spanned across Arizona and include Banner Del. E Webb Medical Center, Banner Boswell Medical Center, Banner Gateway Medical Center, Banner - University Medical Center South, Banner Payson Medical Center, and Banner Thunderbird Medical Center. And of the 16 hospitals ranked in Arizona on the inaugural list, six are with Banner Health. The list is based on a rigorous national ratings system assessing general acute care hospitals across the United States. To be included on the state list, hospitals must first meet the criteria for evaluation on the national list. From that group, Forbes identified the top 30% of hospitals in each state based on star rating percentiles. Ultimately, less than 800 hospitals nationwide earned this designation. This recognition spans Banner's network, reflecting the system's broad and consistent commitment to delivering high-quality acute care to patients across the state, from large metropolitan medical centers to community hospitals serving smaller and rural populations. U.S. News & World Report gives Banner top rankings Banner Health hospitals continue to earn top rankings in the U.S. News & World Report 2026-2027 Best Hospitals rankings, one of the most trusted and rigorous evaluations in American healthcare, assessing hospitals on patient outcomes, safety, advanced technologies, and specialties. Banner - University Medical Center Tucson ranked first in the Tucson region, while Banner - University Medical Center Phoenix, ranked third in Arizona. "Tucson is a vibrant and diverse community, and all people here deserve access to the highest level of care close to home. These recognitions affirm that our team is delivering exactly that," said Alison Flynn Gaffney, chief executive officer of Banner - University Medicine Tucson. "It is a privilege to serve our southern Arizona community." Banner Boswell Medical Center ranked sixth in the state, demonstrating its dedication to quality care in the West Valley. In specialty care, Banner Rehabilitation Hospital Phoenix was named the top rehabilitation hospital in the state and in the Phoenix metro region, earning top honors in the first year that state and regional rankings for rehabilitation hospitals were introduced. These rankings reflect Banner's sustained investment in clinical quality and its ability to deliver excellent care across its academic and community hospital network. "The communities we serve have placed their trust in us - and that trust is something we never take for granted," said Dr. Bessel. "Every award we receive is a reminder of the responsibility we carry and the standard we are committed to upholding." Banner Health is proud to be nationally recognized - but more importantly, proud to be the health system communities across Arizona, Colorado, Wyoming, Nebraska, Nevada, and California call their own. To learn more about Banner Health, visit bannerhealth.com/About. About Banner Health Banner Health's mission is to make health care easier, so life can be better. As one of the nation's largest fully integrated nonprofit health systems, Banner Health is pioneering a sustainable care model that prioritizes prevention, manages chronic disease, and reduces health spending - succeeding when patients stay healthy, not when they get sick. Banner Health operate 33 hospitals and more than 400 sites across six states, delivering seamless care from primary to quaternary medicine, including health insurance, physician networks, world-renowned specialty services, and behavioral health. Accountable to the communities Banner Health serve, Banner Health reinvest every dollar into advancing care, research, and facilities, providing more than $1 billion each year in community benefit. Through its partnership with the University of Arizona, Banner Health drive clinical discoveries across more than 800 trials and train more than 1,300 residents and fellows annually. Headquartered in Arizona, Banner Health serve Arizona, California, Colorado, Nebraska, Nevada, and Wyoming. Its hospitals are consistently ranked among Arizona's top-performing by U.S. News & World Report. For more information, visit bannerhealth.com/about.