Privacy Analyst

University of Maryland - Linthicum Heights, MD

Full-time - Mid Level

Linthicum Heights, MD

Educational Services

About the position

The Privacy Analyst position within the Corporate Compliance and Business Ethics Group (CCBEG) at the University of Maryland Medical System (UMMS) is responsible for managing complex privacy incidents, developing and implementing privacy policies, and ensuring compliance with federal and state privacy laws. The role involves collaboration with various stakeholders to promote privacy initiatives across the organization and includes oversight of privacy audits and monitoring plans.

Responsibilities

• Serve as the privacy resource to UMMS Corporate and Member Organizations, advising on privacy-related issues.
• Manage and resolve complex privacy investigations, collaborating with internal and external stakeholders.
• Conduct root cause analysis and facilitate management action plans for privacy incidents.
• Respond to inquiries from federal and state regulators, drafting investigation reports and management action plans.
• Prepare and submit federal and state privacy breach reports under the direction of the Director of Privacy and Research Compliance.
• Track current, revised, and new federal and state privacy laws, providing status reports to leadership.
• Develop and manage project plans to comply with regulatory changes, collaborating with key stakeholders.
• Conduct audits and reviews to determine compliance with applicable laws and policies.
• Draft and implement the annual Privacy Audit and Monitoring Plan, developing auditing tools and collaborating with Member Organizations.
• Prepare and present audit and monitoring outcome reports with recommendations for improvement.
• Mentor and guide Compliance Analysts in their roles.
• Monitor investigation and inquiry data to identify deficiencies and recommend operational changes.
• Develop privacy awareness messages and educational materials in collaboration with compliance leadership.
• Prepare reports for executive management and the Audit and Compliance Committee.

Requirements

• Bachelor's degree in business administration, healthcare, law, or relevant field and two years of experience in healthcare privacy, case investigations, and auditing and monitoring, or equivalent related fields.
• OR Master's degree in business administration, healthcare, law, or relevant field and one year of experience in healthcare privacy, case investigations, and auditing and monitoring, or equivalent related fields.
• Three years of work experience in health care compliance preferred.
• One year experience with health laws and regulations, including strong knowledge of federal (e.g. HIPAA, and 21st Century Cures Act) and state laws pertaining to privacy.
• Certified in Healthcare Privacy Compliance (CHCP), Healthcare Compliance (CHC), or a relevant compliance certification approved by the VP of Compliance.

Nice-to-haves

• Experience in health care compliance and privacy risk management.
• Strong analytical and problem-solving skills.
• Proficiency in data analysis tools and techniques.

Benefits

• Health insurance coverage
• Dental insurance coverage
• 401k retirement savings plan
• Paid holidays
• Flexible scheduling options