Job Summary

The Privacy Analyst supports the organization's Privacy Program through management of privacy incidents, breach response, privacy investigations, HIPAA compliance activities, and ongoing privacy monitoring. This role partners closely with the Director, Corporate Compliance and Privacy to identify privacy risks, evaluate control effectiveness, implement preventive measures, and strengthen the organization's privacy compliance framework.

The Privacy Analyst serves as a subject matter resource for privacy operations and assists in maintaining compliance with HIPAA, HITECH, state privacy requirements, contractual obligations, and organizational privacy policies.

Key Responsibilities

Privacy Incident Management

• Coordinate intake, investigation, documentation, and resolution of privacy incidents.
• Conduct HIPAA breach risk assessments and support breach notification activities.
• Prepare documentation supporting regulatory reporting requirements.
• Monitor corrective actions resulting from privacy investigations.

Privacy Risk Assessment and Monitoring

• Conduct privacy assessments, audits, and monitoring activities.
• Evaluate compliance with HIPAA Privacy Rule requirements and organizational policies.
• Assess privacy controls and recommend enhancements to strengthen privacy protections.
• Monitor implementation and effectiveness of corrective actions and preventive controls.

Privacy Program Development

• Assist in development and maintenance of privacy policies, procedures, standards, and guidance documents.
• Support privacy training and awareness initiatives.
• Identify recurring privacy issues and recommend systemic improvements.
• Participate in enterprise initiatives to incorporate privacy-by-design principles into operational processes and technology implementations.

Reporting and Continuous Improvement

• Develop privacy dashboards, metrics, and trend analyses.
• Track privacy incidents, breaches, investigations, and corrective actions.
• Monitor regulatory developments and assist with implementation of privacy-related requirements.
• Support internal and external privacy audits and regulatory reviews.

Requirements:

• Strong understanding of HIPAA Privacy Rule, HITECH, and healthcare privacy requirements.
• Experience conducting privacy investigations and breach risk assessments.
• Ability to evaluate control effectiveness and recommend preventive measures.
• Knowledge of privacy monitoring, auditing, and compliance assessment methodologies.
• Strong analytical, organizational, and investigative skills.
• Excellent written communication and documentation abilities.
• Ability to manage sensitive information with professionalism and discretion.

Qualifications:

Education: Bachelor's degree in Healthcare Administration, Health Information Management, Public Health, Nursing, Business Administration, or related field preferred.

Experience:

• Three to five years of experience in healthcare privacy, HIPAA compliance, compliance investigations, health information management, or related field.
• Experience conducting HIPAA privacy assessments, audits, investigations, and breach response activities.
• Experience evaluating privacy controls and implementing corrective actions preferred.

Certification: CHPC, CHPS, RHIA, RHIT, CIPP/US, or other relevant privacy certifications preferred.

Working Conditions

Remote with occasional business travel.

Supervisory Responsibility (if applicable):

None (individual contributor); TBD as team scales.

Compensation: $77,500-$102,600

This role is eligible for a base salary within the posted range. Actual compensation will be determined based on a variety of factors, including skills, experience, and geographic location. Compensation may vary for positions based in high cost-of-labor markets.

The above is intended to describe the general contents and requirements of work being performed by people assigned to this classification. It is not intended to be construed as an exhaustive statement of all duties, responsibilities, or skills of personnel so classified