Senior Privacy Analyst

Day (United States of America)

2600 Westhall Ln

Maitland

Florida

32751

Collaborates with internal and external stakeholders, including Legal, Human Resources, Information Security, and Health Information Management, relating to privacy concerns and/or inquiries to ensure compliance. Supports and assists departments and leaders in implementing corrective action to mitigate effects of inappropriate behavior and activities, and documents such actions. Provides privacy training as needed at the request of the Privacy Manager. Continuously improves methodologies, policies, and procedures to maintain appropriate documentation for all privacy investigation activities. Maintains current knowledge of complex federal and state laws, regulations, rules, and guidance applicable to patient privacy and the protection of data. Contributes to the department’s privacy risk assessment activities. Performs routine surveillance, monitoring, and auditing tasks relating to privacy matters in alignment with the Enterprise Work Plan and other procedural elements of the program. Participates in and supports privacy program projects such as HITRUST Assessment reviews, Third-Party Assurance work groups, etc., and promotes activities to foster ongoing information privacy awareness within the organization. Other duties as assigned. Screens, investigates, and triages assigned privacy matters, including potential inappropriate access, misuse, and loss of sensitive data. Conducts thorough investigations, data gathering, analyses, interviews, and summarizes results in report form at the direction of the Privacy Manager. Responds to proactive user access monitoring alerts, Data Loss Prevention (DLP) incidents, and patient privacy complaints. Conducts data analysis and interviews to inform the investigative process. Performs detailed analyses of findings and summarizes findings in an investigative report. Conducts a standard breach risk assessment for each investigation. Follows appropriate steps to complete the investigation. Supports the department's leadership team in meeting federal and state reporting requirements, including the Office for Civil Rights, regarding breach notification and follow-up investigations. Maintains timely and complete updates in the applicable incident management system. Coordinates and collaborates with relevant stakeholders.Knowledge, Skills, and Abilities:
• Ability to effectively communicate, engage and obtain information from all levels of job classes within the system, and persons outside of the system such as patients, patients’ family members, law [Required]
• enforcement officials, or regulators. [Required]
• Strong knowledge of healthcare privacy laws and regulations to include the Health Insurance Portability and Accountability Act (HIPAA), Health Information Technology for Economic and Clinical Health (HITECH) Act and other state and federal privacy laws. [Required]
• Strong analytical and problem-solving skills. [Required]
• Strong ability to assess, analyze, interpret, and report data, metrics, and trends. [Required]
• Ability to conduct and supervise audits and investigations and document findings. [Required]
• Ability to evaluate, audit and investigate findings to determine compliance with policy and regulations. [Required]
• Ability to effectively handle patient concerns. [Required]
• Ability to provide effective and understandable training to a wide audience, including translating [Required]
• complex privacy concepts into an easy-to-understand format. [Required]
• Proficient writing skills demonstrated by thorough and concise presentations, reports, and other documents. [Required]
• Working knowledge of Microsoft Office Suite (Excel, Word, PowerPoint, OneDrive, etc.). [Required]
• Ability to work with a variety of software programs including but not limited to, FairWarning, Key Light and Navex EthicsPoint (or similar compliance monitoring and tracking systems). [Required]
• Adept at collaborating with other departments including operations, clinical, financial, and administration. [Required]
• Ability to independently research and analyze complex healthcare compliance and regulatory [Required]
• subjects under federal and state laws. [Required]
• Ability to manage and monitor progress of large projects and activities, prioritize work duties and [Required]
• complete tasks accurately and within strict legal deadlines. [Required]
• Ability to maintain strict confidentiality of employees, patients, and company information. [Required]
• Ability to recognize a high standard of ethics in business operations. [Required]
• Excellent oral and written communication and presentation skills. [Required]

Education:
• Bachelor's [Required]

Field of Study:
• in Business, Health Administration, or relevant field

Work Experience:
• 3+ health care privacy experience [Required]

Additional Information:
• N/A

Licenses and Certifications:
• CERTIFIED HEALTHCARE PRIVACY COMPLIANCE (CHPC) [Preferred] OR
• Certified Information Privacy Professional (CIPP) [Preferred]

Physical Requirements: (Please click the link below to view work requirements)
Physical Requirements - https://tinyurl.com/23km2677

$55,224.00 - $102,731.20