Senior Privacy Analyst (Incident Management Risk Mitigation) - Remote

$85,600 - $128,400/Yr

Prime Therapeutics - Hartford, CT

Full-time - Mid Level

Remote - Hartford, CT

Administrative and Support Services

About the position

The Senior Privacy Analyst is responsible for ensuring compliance with privacy regulations and contractual requirements related to protected health information. This role involves administering privacy program activities, developing and maintaining privacy policies, and managing privacy incidents to protect sensitive data across the organization.

Responsibilities

• Collaborate with Privacy leadership, Clients, and internal business partners to ensure appropriate privacy materials are maintained and aligned with current practices and regulations.
• Administer policies and procedures, and participate in Privacy Champion program and committee meetings.
• Serve as a subject matter expert on state and federal consumer data protection and privacy laws, including HIPAA, TCPA, CCPA/CPRA, and COPPA.
• Research and maintain records of applicable federal and state privacy laws, recommending updates to privacy practices as needed.
• Monitor and manage complaints regarding privacy policies, collaborating with Compliance and Legal counsel to resolve issues.
• Manage complex privacy incidents and recommend corrective actions to prevent future occurrences.
• Collaborate in the development and maintenance of privacy policies and training requirements across the organization.
• Monitor compliance with privacy practices and facilitate sanctions for non-compliance, working with various teams to ensure adherence to privacy obligations.
• Serve as the risk mitigation and corrective action lead in the Incident Management vertical of the privacy team.
• Develop and oversee corrective action plans in coordination with privacy leadership and business areas.
• Champion remediation efforts to reduce the loss of protected health information from incidents.
• Develop and maintain positive Client relationships, proactively addressing concerns.

Requirements

• Bachelor's degree in Business, Healthcare, Political Science, Legal, or related area; or equivalent combination of education and relevant work experience.
• 5 years of experience in a legal or compliance role, or in project or program coordination within a highly regulated industry.
• 5 years of experience with HIPAA and state or federal privacy laws.
• Eligibility to work in the United States without the need for work visa or residency sponsorship.

Nice-to-haves

• Healthcare, Pharmacy Benefit Management (PBM) or managed care work experience.
• Master's degree or advanced education in Business, Healthcare, Political Science, Legal, or related area.
• Certified Information Privacy Professional (CIPP), Certified Information Privacy Technologist (CIPT), or Certified Information Privacy Manager (CIPM) certifications.
• Certified Compliance and Ethics Professional (CCEP) or Certified Healthcare Compliance Professional (CHC) or Certified Healthcare Privacy Compliance (CHPC).
• Project management experience and/or Project Management Professional (PMP) certification.

Benefits

• Health insurance
• Dental insurance
• Vision insurance
• 401k plan
• Paid holidays
• Paid time off
• Flexible scheduling
• Tuition reimbursement
• Professional development opportunities