Health Info Privacy Specialist — HIPAA Risk & Compliance

Covenant Health; Oregon; On-site; USD 85,000 - 115,000; Full time

Job summary

Covenant Health is seeking a Health Information Privacy Specialist to oversee privacy investigations, risk assessments and staff education across our facilities. The role emphasizes independent case analysis, documentation, and collaboration with executives to maintain PHI integrity.

The position involves travel to Covenant Health facilities, reviewing access controls, and ensuring compliance with HIPAA and internal policies. A four-year related experience and privacy credentials are preferred.

Qualifications

• 4+ years of directly-related work experience in privacy or information management.
• Experience conducting privacy assessments and investigations with documentation.
• Familiarity with PHI storage, access controls and disclosure processes.
• Ability to train staff on privacy and confidentiality requirements.

Responsibilities

• Investigate privacy concerns, misdirected faxes, and access reviews.
• Monitor audit trails and ensure compliance with privacy policies.
• Coordinate with HR, management and legal on disciplinary actions as needed.
• Provide privacy training to hospital staff, physicians, and volunteers.
• Serve as liaison between hospital/ facility and privacy committees.

Skills

Privacy compliance

HIPAA knowledge

Audit & investigations

Interpersonal communication

Education

Associate's degree or higher in Health Information Management/ related field

Certified privacy or compliance credentials (preferred)

Tools

Sovera Optical Imaging

Job description

Covenant Health is seeking a Health Information Privacy Specialist to oversee privacy investigations, risk assessments and staff education across our facilities. The role emphasizes independent case analysis, documentation, and collaboration with executives to maintain PHI integrity.

The position involves travel to Covenant Health facilities, reviewing access controls, and ensuring compliance with HIPAA and internal policies. A four-year related experience and privacy credentials are preferred.