Privacy Analyst-Compliance

$49,712 - $75,878/Yr

Presbyterian Healthcare Services - Albuquerque, NM

Full-time - Mid Level

Remote - Albuquerque, NM

10,001+ employees

Ambulatory Health Care Services

About the position

Overview: Now hiring a Privacy Analyst for the Compliance Department! Under the direction of the Privacy Officer, the Privacy Analyst will assist with the day-to-day activities of privacy. The Privacy Analyst will provide privacy and data security guidance to business areas and will coordinate with various internal departments to assure operational and procedural compliance with state and federal regulations. An integral aspect of this position is reviewing and managing information that may be sensitive due to potential corrective and disciplinary actions resulting from review performed by the Privacy Officer. Breaching confidentiality in this position has potential for causing serious repercussions for the enterprise. This position requires professional discretion due to the highly sensitive nature of the work performed. How you belong matters here. We value our employees' differences and find strength in the diversity of our team and community. At Presbyterian, it's not just what we do that matters. It's how we do it - and it starts with our incredible team. From Information Technology to Food Services and beyond, our non-clinical employees make a meaningful impact on the healthcare provided to our patients and members.

Responsibilities

• Assumes responsibility for the initial screening of complaints and triaging as appropriate of system-wide matters.
• Conducts thorough and comprehensive investigation of privacy violation allegations, including data gathering analyses, interviews, and report writing at the direction of the Privacy Officer.
• Provides support to the Privacy Officer in meeting federal and state reporting requirements, including breach notification and follow-up investigations.
• Acts as an integral member of the Privacy Office by mitigation of risk.
• Supports Privacy Office compliance operations, special projects, and privacy/security incident and complaint investigations.
• Assists in the assessment and investigation of reported privacy incidents.
• Manages multiple tasks and work streams simultaneously within the PHS environment.
• Coordinates with Human Resources and other departments, as needed, during the privacy investigation and breach notification processes.
• Assists the Privacy Officer in creating and ensuring an efficient and transparent investigative process is in place system wide for privacy matters.
• Assists in the areas of breach investigations, communication of audit findings, policy development, risk analysis and report preparation.
• Maintains a thorough and detailed tracking system for purposes of reporting and analysis.
• Continuously improves the methodology and policies and procedures to maintain appropriate documentation for all privacy investigation activities, including a detailed log of all allegations, information related to affected parties, investigation details, and breach risk assessments.
• Conducts monitoring audits and investigations with respect to electronic health record access.
• Follows-up and resolves any identified issues.
• Maintains associated documentation.
• Provides research and analysis as needed on privacy and data security matters.
• Effectively maintains collaborative working relationships to achieve increased satisfaction with, and participation in, the compliance and privacy program.
• Demonstrates strong analytical, organization, and professional skills.
• Coordinates with Legal, Human Resources, IT Security, Marketing, Health Information Management, and other departments, as needed, during privacy investigations and breach notification processes.
• Pursues and maintains a relevant privacy industry-recognized certification, (CIPP, CHC, etc.)

Requirements

• Bachelor's degree in a relevant field.
• Minimum of 3 years experience in the healthcare industry, including conducting privacy investigations and trainings.
• Experience in a regulatory compliance role is desirable.
• Health care privacy compliance experience preferred as well as solid understanding of HIPAA and state privacy and data security rules.
• Knowledge of HIPAA/HITECH, including breach notification protocol.
• Strong written, verbal and presentation skills.
• Proven analytical, organizational and problem-solving skills.

Nice-to-haves

• Certified Information Privacy Professional (CIPP) certification is a plus.
• Experience with electronic health record systems.

Benefits

• Wellness program
• Disability insurance
• Health insurance
• Dental insurance
• Paid time off
• Vision insurance
• Gym membership
• Life insurance