Staff Analyst, Privacy and Data Compliance Analyst

$81,681 - $117,850/Yr

Heluna Health - Los Angeles, CA

Full-time

Los Angeles, CA

Religious, Grantmaking, Civic, Professional, and Similar Organizations

About the position

Housing for Health (HFH) is a program office within Health Services Administration, a division under the Los Angeles County Department of Health Services (DHS). HFH was created and put into implementation in support of the Los Angeles County Homeless Initiative recommendations in response to and in support of the County's effort to address and combat homelessness in the communities residing within Los Angeles County. Our organization follows a hybrid work structure where employees work both remotely and from the office, as needed. The Staff Analyst - Privacy and Data Compliance Analyst will work closely with the Program Implementation Manager to implement leadership directives related to privacy, data security, and data use compliance activities within Community Programs. This includes risk management, incident/privacy investigations, and IT security reviews when necessary. The role involves implementing data governance strategies, policies, and procedures established by the PIM to ensure data quality and security throughout all Community Programs. The Staff Analyst - Privacy and Data Compliance Analyst will serve as the lead in resolving inquiries concerning data utilization and varying consent levels. They will oversee data sharing initiatives and collaborate with various stakeholders, including DHS IT, privacy and security teams, legal counsel, and external entities. This position requires the development and implementation of internal standards governing the use, access, sharing, and storage of data, as well as ensuring compliance with privacy, security, and data use regulations. The analyst will be responsible for creating and maintaining documentation, developing HIPAA compliance standards, and leading privacy and security-related audits and training. The Staff Analyst - Privacy and Data Compliance Analyst is detail-oriented and proficient in managing compliance with privacy, security, and data use regulations. They will facilitate regular data stewardship meetings and workshops, collaborate with training teams, and foster a culture of data governance awareness and accountability throughout the organization.

Responsibilities

• Serve as the lead in resolving inquiries concerning data utilization and varying consent levels.
• Oversee data sharing initiatives involving collaboration across HFH business stakeholders, centralized DHS IT, centralized DHS privacy and security teams, DHS legal counsel, partner departments, and external entities.
• Help develop and oversee the implementation of internal standards governing the use, access, sharing, and storage of internal data.
• In collaboration with the Program Implementation Manager, make recommendations for protocols for data destruction and long-term storage in adherence to regulatory requirements and ensure proper implementation of agreed-upon protocols.
• Implement systems to ensure continuous compliance with privacy, security, and data use regulations, including organizing privacy-related training.
• Oversee the revision of existing and creation of new consent forms, data use agreements, data sharing agreements, and other pertinent documents.
• Develop standards specifically tailored to HIPAA compliance and the handling of protected health information (PHI).
• Create internal desk procedures for handling sensitive information in alignment with established privacy protocols.
• Ensure that all data sharing, exchanges, and usage workflows comply with privacy and security standards.
• Classify information based on sensitivity levels, such as PHI, non-consented data, or governed by specific regulations like AB210.
• Establish and maintain centralized documentation pertaining to Community Programs' privacy and security standards.
• Implement ongoing internal monitoring mechanisms to guarantee continuous compliance with privacy and security regulations.
• Collaborate with the Privacy Officer to finalize all required audit documentation, incorporating findings from Program investigations.
• Collaborate with the CHAMP Team and program areas/business units to identify and assign CHAMP data ownership responsibilities, ensuring CHAMP data is managed effectively and in alignment with established business protocols.
• Facilitate regular data stewardship meetings and workshops to educate stakeholders and address data governance-related concerns.
• Collaborate with appropriate training teams to develop training programs to educate employees on data governance principles, policies, and best practices.
• Foster a culture of data governance awareness and accountability throughout the organization.
• Collaboratively define privacy and security policies, standards, and guidelines for CHAMP with the Business Systems team and ensure business adherence through periodic reviews/audits and reporting.
• Coordinate with legal, privacy, and security teams to address privacy and security concerns and requirements.

Requirements

• Four or more years of highly complex administrative or supervising experience in the health, housing, social services, or related sectors.
• A valid California Class C Driver License or the ability to utilize an alternative method of transportation when needed to carry out job-related essential functions.
• Successful clearing through the Live Scan and the Health Clearance process with the County of Los Angeles.

Nice-to-haves

• At least one year of experience in privacy, data security, and compliance roles.
• Certification in information security or privacy (e.g., CIPP, CIPT, CISSP, CISM).
• Strong analytical skills with experience using business analysis techniques (e.g., requirements analysis, modeling, user stories) to identify and solve complex problems.
• Excellent written and verbal communication skills, including the ability to express technical concepts clearly to both technical and non-technical audiences.
• Strong project management skills with the ability to manage multiple overlapping priorities and timelines effectively.
• Proven ability to engage with various stakeholders (e.g., IT, legal, privacy, security teams) to promote a culture of compliance and security awareness.
• Ability to learn quickly and adapt to shifting priorities in a dynamic environment.
• Strong collaboration skills with the ability to work effectively in cross-functional teams.
• Strong negotiation and conflict resolution skills to address and resolve privacy and security issues.