HIPAA Privacy Investigator & Operations Administrator

University of South Florida; Tampa (FL); Vor Ort; USD 60.000 - 90.000; Vollzeit

Zusammenfassung

The University of South Florida is seeking a HIPAA Privacy Investigator & Operations Administrator to oversee privacy compliance activities, investigate potential HIPAA violations, and support privacy office operations at the Office of Compliance and Ethics.

The role involves coordinating investigations, training staff, and aligning policies with HIPAA rules, while supporting daily operations and budgeting within a large academic health system.

Qualifikationen

• Associate’s Degree or equivalent and two (2) years of experience involving federal or state privacy laws, other legal field experience or work requiring access to an electronic medical record.
• Within 12 months of hire, applicant will be required to be certified in Healthcare Privacy Compliance (CHPC).
• Degree Equivalency Clause: Four years of direct experience for a bachelor’s degree.

Aufgaben

• Investigate privacy breaches and PHI violations.
• Analyze incidents, interview involved parties, review documentation, and determine findings.
• Prepare detailed investigative reports, corrective action recommendations, and executive summaries.
• Monitor compliance with HIPAA Privacy, Security, and Breach Notification Rules.
• Coordinate breach risk assessments and support breach notification activities when required.
• Maintain investigation records and documentation in accordance with regulatory requirements.
• Develop and deliver privacy training and awareness programs for employees.
• Monitor emerging healthcare privacy regulations and recommend policy updates.
• Collaborate with legal counsel, compliance officers, human resources, and department leaders regarding privacy matters.
• Coordinate daily operational activities to support organizational and privacy office objectives and regulatory compliance.
• Develop, implement, and maintain policies, procedures, and workflows.
• Monitor and track privacy incidents and projects and prepare reports for leadership.
• Support contract administration, vendor management, and departmental budgeting processes.
• Facilitate process improvement initiatives to enhance efficiency and service quality.
• Coordinate meetings, project plans, and cross-functional operational initiatives.
• Maintain operational records, databases, and compliance documentation.
• Support employee onboarding, training coordination, and policy implementation activities.
• Ensure adherence to organizational policies, and applicable regulations.

Kenntnisse

HIPAA knowledge

Privacy investigations

Root-cause analysis

Compliance

Communication

MS Office

EMR experience

Ausbildung

Associate degree

CHPC certification within 12 months

Tools

Microsoft Office

Compliance software

EMR systems

Jobbeschreibung

Job Description

The University of South Florida is a top-ranked research university serving approximately 50,000 students from across the globe at campuses in Tampa, St. Petersburg, and USF Health. In 2025, U.S. News & World Report recognized USF with its highest overall ranking in university history, as a top 50 public university for the seventh consecutive year and as one of the top 15 best values among all public universities in the nation. U.S. News also ranks the USF Health Morsani College of Medicine in the highest tier, placing it as one of the top 16 medical schools in the nation and inside the top 10 among public universities.USF is a member of the Association of American Universities (AAU), a group that includes only the top 3% of universities in the U.S. With an all-time high of $750 million in research funding in 2025 and as a top 20 public university for producing U.S. patents, USF uses innovation to transform lives and shape a better future. The university generates an annual economic impact of nearly $10 billion for the state of Florida. USF’s Division I athletics teams compete in the American Conference. Learn more a

The HIPAA Privacy Investigator & Operations Administrator, within the Office of Compliance and Ethics, is responsible for overseeing privacy compliance activities, investigating potential HIPAA violations, and supporting privacy office operational functions that ensure efficient, compliant, and effective organizational performance. This role serves as a key liaison between privacy, leadership, staff, and external stakeholders to protect patient information while optimizing operational processes.

Job Description

The University of South Florida is a top-ranked research university serving approximately 50,000 students from across the globe at campuses in Tampa, St. Petersburg, and USF Health. In 2025, U.S. News & World Report recognized USF with its highest overall ranking in university history, as a top 50 public university for the seventh consecutive year and as one of the top 15 best values among all public universities in the nation. U.S. News also ranks the USF Health Morsani College of Medicine in the highest tier, placing it as one of the top 16 medical schools in the nation and inside the top 10 among public universities.USF is a member of the Association of American Universities (AAU), a group that includes only the top 3% of universities in the U.S. With an all-time high of $750 million in research funding in 2025 and as a top 20 public university for producing U.S. patents, USF uses innovation to transform lives and shape a better future. The university generates an annual economic impact of nearly $10 billion for the state of Florida. USF’s Division I athletics teams compete in the American Conference. Learn more a www.usf.edu.

The HIPAA Privacy Investigator & Operations Administrator, within the Office of Compliance and Ethics, is responsible for overseeing privacy compliance activities, investigating potential HIPAA violations, and supporting privacy office operational functions that ensure efficient, compliant, and effective organizational performance. This role serves as a key liaison between privacy, leadership, staff, and external stakeholders to protect patient information while optimizing operational processes.

Responsibilities

HIPAA Privacy Investigation

• Conduct investigations into alleged privacy breaches, unauthorized disclosures, and violations involving protected health information (PHI)
• Analyze incidents, interview involved parties, review documentation, and determine findings
• Prepare detailed investigative reports, corrective action recommendations, and executive summaries
• Monitor compliance with HIPAA Privacy, Security, and Breach Notification Rules
• Coordinate breach risk assessments and support breach notification activities when required
• Maintain investigation records and documentation in accordance with regulatory requirements
• Develop and deliver privacy training and awareness programs for employees
• Monitor emerging healthcare privacy regulations and recommend policy updates
• Collaborate with legal counsel, compliance officers, human resources, and department leaders regarding privacy matters

Operations Administration

• Coordinate daily operational activities to support organizational and privacy office objectives and regulatory compliance
• Develop, implement, and maintain policies, procedures, and workflows
• Monitor and track privacy incidents and projects and prepare reports for leadership
• Support contract administration, vendor management, and departmental budgeting processes
• Facilitate process improvement initiatives to enhance efficiency and service quality
• Coordinate meetings, project plans, and cross-functional operational initiatives
• Maintain operational records, databases, and compliance documentation
• Support employee onboarding, training coordination, and policy implementation activities
• Ensure adherence to organizational policies, and applicable regulations

Qualifications

Minimum

This position requires an Associate’s Degree or equivalent and two (2) years of experience involving federal or state privacy laws, other legal field experience or work requiring access to an electronic medical record. College or other relevant post-secondary coursework may substitute for the experience requirement on a year for year basis.

Within 12 months of hire, applicant will be required to be certified in Healthcare Privacy Compliance (CHPC).

Degree Equivalency Clause: Four years of direct experience for a bachelor’s degree.

• Senate Bill 1310- The Florida Senate (https://www.flsenate.gov/Session/Bill/2023/1310) is conditional upon meeting all employment eligibility requirements in the U.S.
• SB 1310: Substitution of Work Experience for Postsecondary Education Requirements
• A public employer may include a postsecondary degree as a baseline requirement only as an alternative to the number of years of direct experience required, not to exceed:
• (a) Two years of direct experience for an associate degree;
• (b) Four years of direct experience for a bachelor’s degree;
• (c) Six years of direct experience for a master’s degree;
• (d) Seven years of direct experience for a professional degree; or
• (e) Nine years of direct experience for a doctoral degree
• Related work experience may not substitute for any required licensure, certification, or registration required for the position of employment as established by the public employer and indicated in the advertised description of the position of employment.
• Minimum Qualifications that require a high school diploma are exempt from SB 1310.

Preferred

• Bachelor's degree in Healthcare Administration, Health Information Management, Business Administration, Public Administration, Compliance, or a related field
• Minimum 1-3 years of experience in HIPAA compliance, privacy investigations, healthcare operations, or related areas
• Strong knowledge of HIPAA regulations, healthcare privacy requirements, and compliance frameworks
• Experience conducting investigations, root-cause analyses, and corrective action planning
• Excellent written and verbal communication skills
• Strong analytical, organizational, and problem-solving abilities
• Proficiency with Microsoft Office Suite and compliance or case-management systems
• Experience working with an electronic medical record