Privacy Analyst

Technix LLC; Montgomery (AL); On-site; USD 70,000 - 100,000; Full time

Job summary

Medicaid in Montgomery, AL is seeking a Senior Privacy Analyst to assist the Agency Privacy Officer in day-to-day privacy operations. The role reviews, tracks, coordinates, and documents privacy-sensitive requests and incidents involving PHI/PII.

You will manage privacy requests, evaluate risks, and ensure HIPAA and Medicaid confidentiality compliance while supporting agency audits and privacy program enhancements. Onsite from day one.

Qualifications

• Working knowledge of HIPAA Privacy Rule and Breach Notification requirements.
• Working knowledge of Medicaid confidentiality requirements: 42 CFR Part 431, Subpart F.
• Understanding of 42 CFR Part 2 considerations and related privacy requirements.
• Ability to review and evaluate subpoenas, court orders, HIPAA authorizations, access requests, privacy incident reports.

Responsibilities

• Privacy Request Management and processing: individual access and information-gathering requests.
• Review and escalate privacy incidents, complaints, and breach reporting activities.
• Ensure compliance with HIPAA, confidentiality requirements, and applicable regulations.
• Conduct remote and onsite privacy assessments to verify compliance.
• Assist in development and documentation of the Agency's privacy program during audits.

Skills

HIPAA privacy

HIPAA authorizations

PHI/PII handling

Privacy risk assessment

Job description

Duration: 12 Months

Location: Montgomery, AL (Onsite from day 1)

Job ID: #13050

Agency: Medicaid

Anticipated start date: 09/01/2026

Interview Types: Video/In Person based on location

Position Summary

The Senior Privacy Analyst supports the Agency Privacy Officer in the day-to-day operation of the Agency's privacy program. This position reviews, tracks, coordinates, and documents privacy-sensitive requests and incidents involving:

• Medicaid applicants, recipients, and beneficiaries
• Claims, eligibility, and enrollment information
• Provider and program integrity data
• Protected Health Information (PHI)
• Personally Identifiable Information (PII)

Key Responsibilities

• Privacy Request Management
• Responsible for processing and reviewing:
• Individual access requests
• Information-gathering requests
• Recipient-directed disclosures
• HIPAA authorizations
• Subpoenas and court/legal requests
• Privacy complaints
• Privacy incident reports
• Breach reporting activities
• Privacy Compliance & Risk Assessment
• Apply HIPAA Privacy and Breach Notification requirements.
• Ensure compliance with Medicaid confidentiality requirements and applicable regulations.
• Review requests and incidents for privacy risks and compliance concerns.
• Verify identity and authority while adhering to minimum necessary standards.
• Follow established escalation procedures and privacy best practices.
• Conduct remote and onsite privacy assessments to verify compliance.

Program Support & Audit Participation

• Assist in the development, implementation, maintenance, and documentation of the Agency's privacy program, including participation in federal and state audits conducted by organizations such as:
• Social Security Administration (SSA)
• Internal Revenue Service (IRS)
• U.S. Department of Health & Human Services (HHS)
• Centers for Medicare & Medicaid Services (CMS)
• Office for Civil Rights (OCR)
• State Examiner's Board
• Other regulatory and oversight agencies

Required Knowledge

• Working knowledge of HIPAA Privacy Rule and Breach Notification requirements.
• Working knowledge of Medicaid confidentiality requirements, particularly 42 CFR Part 431, Subpart F.
• Understanding of 42 CFR Part 2 considerations and related privacy requirements.

Required Skills

• Ability to review and evaluate:
• Subpoenas
• Court orders
• HIPAA authorizations
• Access requests
• Privacy incident reports

Position: Privacy Analyst

Duration: 12 Months

Location: Montgomery, AL (Onsite from day 1)

Job ID: #13050

Agency: Medicaid

Anticipated start date: 09/01/2026

Interview Types: Video/In Person based on location

Position Summary

The Senior Privacy Analyst supports the Agency Privacy Officer in the day-to-day operation of the Agency's privacy program. This position reviews, tracks, coordinates, and documents privacy-sensitive requests and incidents involving:

• Medicaid applicants, recipients, and beneficiaries
• Claims, eligibility, and enrollment information
• Provider and program integrity data
• Protected Health Information (PHI)
• Personally Identifiable Information (PII)

Key Responsibilities

• Privacy Request Management
• Responsible for processing and reviewing:
• Individual access requests
• Information-gathering requests
• Recipient-directed disclosures
• HIPAA authorizations
• Subpoenas and court/legal requests
• Privacy complaints
• Privacy incident reports
• Breach reporting activities
• Privacy Compliance & Risk Assessment
• Apply HIPAA Privacy and Breach Notification requirements.
• Ensure compliance with Medicaid confidentiality requirements and applicable regulations.
• Review requests and incidents for privacy risks and compliance concerns.
• Verify identity and authority while adhering to minimum necessary standards.
• Follow established escalation procedures and privacy best practices.
• Conduct remote and onsite privacy assessments to verify compliance.

Program Support & Audit Participation

• Assist in the development, implementation, maintenance, and documentation of the Agency's privacy program, including participation in federal and state audits conducted by organizations such as:
• Social Security Administration (SSA)
• Internal Revenue Service (IRS)
• U.S. Department of Health & Human Services (HHS)
• Centers for Medicare & Medicaid Services (CMS)
• Office for Civil Rights (OCR)
• State Examiner's Board
• Other regulatory and oversight agencies

Required Knowledge

• Working knowledge of HIPAA Privacy Rule and Breach Notification requirements.
• Working knowledge of Medicaid confidentiality requirements, particularly 42 CFR Part 431, Subpart F.
• Understanding of 42 CFR Part 2 considerations and related privacy requirements.

Required Skills

• Ability to review and evaluate:
• Subpoenas
• Court orders
• HIPAA authorizations
• Access requests
• Privacy incident reports