Privacy Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Conduct investigations, document findings, and report issues concerning the privacy and confidentiality of Protected Health Information in accordance with HIPAA regulations.

• Notify the DHHS Office for Civil Rights of breaches while adhering to federal legal requirements.

• Draft breach notification letters following BSMH policies.

• Request audits of electronic systems for data and/or access.

• Integrate audit results into investigations.

• Develop and maintain electronic records for privacy incident investigations, resolutions, and corrective measures or sanctions.

• Regularly meet with and keep the Director of Privacy informed about the status of investigations and projects.

• Ensure the implementation and functionality of HIPAA corrective action plans.

• Uphold the confidentiality of investigations.

• Conduct on-site education and investigations when travel is necessary and approved.

• Perform additional job-related tasks as assigned.

⛳️ Requirements

• 4-6 years of experience with HIPAA and HITECH privacy regulations or similar compliance areas (required).

• Bachelor’s degree in Business Administration, Health Care Management, Nursing, or Health Information Management (preferred).

• Certification in Healthcare Privacy Compliance (preferred).

• Certified Information Privacy Manager credential (preferred).

• Previous experience in the healthcare sector (preferred).

• Familiarity with EPIC Electronic Health Record systems (preferred).

• Strong understanding of Privacy, Security, and Breach Notification laws.

• Advanced ability to conduct, document, and report on privacy incidents and breaches.

• Experience in drafting and issuing breach notification letters in compliance with regulatory standards.

• Proficient in using Incident Management Systems (e.g., Symplr, SafeCARE).

• Experience in reporting breaches to the DHHS Office for Civil Rights (OCR) and other relevant authorities.

• Skilled in creating and maintaining electronic records for investigations and resolutions.

• Proficient with Electronic Health Record (EHR) and safety event systems (e.g., EPIC, SafeCARE).

• Competent in Microsoft Office and CoPilot.

• Strong attention to detail.

• Excellent communication and active listening abilities.

• Capability to adapt in fast-paced, evolving regulatory environments.

• Ability to collaborate effectively with team members and stakeholders.

• Skillful in managing privacy complaints with empathy and professionalism.

• Adept at handling multiple investigations and meeting deadlines efficiently.

• Organize records and projects effectively.

• Capable of managing high-pressure situations and varying workloads.

🏝️ Benefits

• Competitive salary.

• Incentives.

• Referral bonuses.

• 403(b) plan with employer contributions (when eligible).

• Comprehensive medical, dental, vision, and prescription coverage.

• Options for HSA/FSA.

• Life insurance.

• Access to mental health resources and discounts.

• Paid time off.

• Parental leave and FMLA leave.

• Short- and long-term disability benefits.

• Backup care for children and elderly family members.

• Tuition assistance.

• Support for professional development and continuing education.