Privacy Analyst

Acord Solutions Group - Linthicum Heights, MD

Full-time - Mid Level

Linthicum Heights, MD

Professional, Scientific, and Technical Services

About the position

The Privacy Analyst position at the University of Maryland Medical System (UMMS) is responsible for managing privacy incidents, developing and implementing privacy policies, and ensuring compliance with federal and state privacy laws. This role serves as a key resource for privacy-related issues across the organization, collaborating with various stakeholders to uphold the integrity of the privacy program. The analyst will also conduct audits, manage investigations, and provide education on privacy matters, all while supporting the overarching goals of the Corporate Compliance and Business Ethics Group.

Responsibilities

• Serve as the privacy resource to UMMS Corporate and Member Organizations, advising on privacy-related issues.
• Manage and resolve complex privacy investigations, collaborating with internal and external stakeholders.
• Conduct root cause analysis and oversee the implementation of management action plans.
• Respond to inquiries from federal or state regulators and draft investigation reports.
• Prepare and submit federal and state privacy breach reports under the direction of the Director of Privacy.
• Track current, revised, and new federal and state privacy laws and report on their impact.
• Develop and manage project plans to comply with regulatory changes and educate stakeholders.
• Conduct audits and reviews to determine compliance with applicable laws and policies.
• Draft and implement the annual Privacy Audit and Monitoring Plan, developing auditing tools and conducting quality assurance reviews.
• Mentor and guide Compliance Analysts, reviewing their investigation and breach risk assessment work.

Requirements

• Bachelor's degree in business administration, healthcare, law, or relevant field and two years of experience in healthcare privacy, case investigations, and auditing and monitoring, or equivalent related fields.
• OR Master's degree in business administration, healthcare, law, or relevant field and one year of experience in healthcare privacy, case investigations, and auditing and monitoring, or equivalent related fields.
• Three years of work experience in health care compliance preferred.
• One year experience with health laws and regulations, including strong knowledge of federal and state laws pertaining to privacy and medical system policies.
• Certified in Healthcare Privacy Compliance (CHCP), Healthcare Compliance (CHC), or a relevant compliance certification approved by the VP of Compliance.

Nice-to-haves

• Experience with health laws and regulations, including HIPAA and the 21st Century Cures Act.
• Strong analytical, problem-solving, and decision-making skills.
• Ability to work in a self-directed team and manage time effectively.

Benefits

• Competitive salary
• Opportunities for professional development
• Comprehensive health benefits
• Retirement savings plan options