Hybrid Privacy Analyst - Audits, Data Insights, Training

UPMC; Pittsburgh (Allegheny County); Hybrid; USD 65,000 - 95,000; Full time

Job summary

UPMC is seeking an Intermediate Privacy Analyst to join its privacy team. The role supports the enterprise‑wide privacy program under the Office of Patient and Consumer Privacy and collaborates with Privacy Officers across the system.

Responsibilities include handling privacy inquiries, investigations, regulatory reporting, and data analysis to drive compliance, training delivery, and policy development across the organization.

Qualifications

• Bachelor's Degree with 2 years of health care or related experience.
• Advanced Degree or professional certification preferred.
• Experience in an academic medical center preferred.
• Data Analytics experience preferred.
• Excel and Access proficiency strongly preferred.
• Ability to learn new technology and interpret regulations.

Responsibilities

• Support the OPCP in administering the enterprise-wide privacy program and provide guidance to Privacy Officers.
• Manage and support internal privacy investigations, including documenting workflows and compliance reporting.
• Coordinate responses to external audits, regulatory inquiries, and government investigations (e.g., HIPAA).
• Research and interpret state and federal regulations to develop policies and compliance resources.
• Monitor privacy compliance data, track trends, and support remediation efforts.
• Develop and deliver privacy training and educational materials for staff.

Education

Bachelor's Degree

Advanced Degree or professional certification

Tools

Microsoft Excel

Microsoft Access

Job description

UPMC is seeking an Intermediate Privacy Analyst to join its privacy team. The role supports the enterprise‑wide privacy program under the Office of Patient and Consumer Privacy and collaborates with Privacy Officers across the system.

Responsibilities include handling privacy inquiries, investigations, regulatory reporting, and data analysis to drive compliance, training delivery, and policy development across the organization.