Privacy Analyst

hcsc; Richardson (TX); Hybrid; USD 70,000 - 100,000; Full time

Job summary

HCSC in Richardson, TX (or Chicago, IL) seeks a dynamic Privacy Analyst to support the organization’s privacy program, ensuring HIPAA and state privacy compliance. The role involves data gathering, reporting, policy documentation, and communications with auditors and regulators.

It is a hybrid position requiring in-office visibility three days per week. Relocation is not offered; sponsorship will not be extended.

Qualifications

• Bachelor’s degree (Healthcare Administration, Health Information Management, Business Administration, Compliance) or 4 years direct healthcare privacy experience.
• Knowledge of health care industry and privacy regulations.
• Strong written and verbal communication; analytical and organizational skills.

Responsibilities

• Support HIPAA/privacy office operations and regulatory reporting.
• Coordinate privacy risk assessments and findings.
• Maintain privacy office documentation, procedures and standards.
• Assist with triaging privacy compliance requests and audits.
• Prepare and analyze regular and ad-hoc privacy reports.

Skills

Healthcare privacy

Analytical abilities

Communication

Organizational skills

Regulatory knowledge

Problem solving

Education

Bachelor’s Degree (Healthcare Administration/ health info mgmt)

4 years direct healthcare privacy experience

Tools

Workday

Tableau

Power BI

ERP

Job description

At HCSC, our employees are the cornerstone of our business and the foundation to our success. We empower employees with curated development plans that foster growth and promote rewarding, fulfilling careers.

Join HCSC and be part of a purpose-driven company that will invest in your professional development.

Job Summary

BASIC FUNCTION

HCSC is looking for a dynamic Privacy Analyst to join its Richardson TX or Chicago IL office! This role is responsible for supporting the organization's privacy program by ensuring compliance with HIPAA, HITECH, state privacy regulations, and organizational policies related to protected health information (PHI). Will be responsible for actively supporting and coordinating HCSC Privacy Office operations, and initiatives; including gathering privacy risk and privacy compliance data; developing, updating, and maintaining privacy office documentation, procedures, and standards; developing and analyzing regular and ad-hoc reports; drafting responses to key stakeholders, auditors, and regulators; triaging privacy compliance requests; performing Privacy Office database management including disseminating information from various sources and systems and project management support This position supports and coordinates operational activities and initiatives and resolve issues by working with staff and leadership within the department and across other departments supported by the Divisional Privacy Officer (DPO) model. Responsible for supporting, coordinating, and distributing regulatory information via intranet and internet website(s), tracking and reporting on a variety of regulatory required initiatives under federal and state laws and compliance with corporate policies and procedures.

NOTE: this role is HYBRID/FLEX and requires in-office visibility three days per week, working from home the other two days. Relocation is NOT available; sponsorship will NOT be extended either now or in the future.

JOB REQUIREMENTS

• Bachelor's Degree (preferably in in Healthcare Administration, Health Information Management, Business Administration, Compliance) OR 4 years direct of work experience in healthcare privacy, compliance, health information management, auditing, or related areas.
• Knowledge of the health care industry.
• Decision-making skills and analytical abilities.
• Excellent verbal and written communication skills; listening skills; and organizational skills.
• Ability to work with peers and resolve issues or complete projects/initiatives.
• Strong analytical and problem resolution skills.
• Ability to work with highly sensitive and confidential information and manage multiple priorities while maintaining confidentiality.
• PC proficiency to include MS Office applications (i.e. Word, Excel, PowerPoint, Workday, Co-Pilot) and healthcare technology systems.

PREFERRED JOB REQUIREMENTS

• Strong HCSC organizational knowledge.
• Working knowledge of HIPAA Privacy Rule, HIPAA Security Rule, HITECH, and healthcare privacy regulations.
• Experience performing privacy assessments and documenting findings.
• Certified in Healthcare Privacy and Security (CHPS), Certified Information Privacy Professional (CIPP/US), Certified in Healthcare Compliance (CHC), or similar certification.
• Knowledge of privacy monitoring tools, access management, and audit reporting systems (i.e. Tableau, Power BI, ERP).

ESSENTIAL FUNCTIONS

• Manages various responsibilities within the HCSC Privacy Office, supporting low and moderate risk issues and departments, as appropriate, to ensure HCSC compliance with various federal and state regulations.
• Supports senior level Privacy Office workers and other HCSC departments regarding policies, procedures, and process flows on an annual and ad hoc basis (or obtaining certifications from managers that processes are current)
• Coordinates, validates, and supports monthly, quarterly, and annual reports regarding core Privacy Office functions.
• Supports Privacy Office policies and procedures updates, ensuring the appropriate training information/notification, preemption information and complaint information for employees are up-to-date and accurate.
• Facilitates any changes in departmental policies/procedures as a result of internal audit/compliance activities.
• Support tracking and triaging of all complaints received, notifying senior level Privacy Office workers of upcoming response deadlines.
• Supports the monitoring of HCSC disclosures, analyzing and identifying any low to moderate risk practices for solutioning with senior level Privacy Office workers.
• Supports, facilitates, and coordinates Privacy Risk Assessment completion and analyzes risk based upon HIPAA required criteria and/or other breach analysis requirements; performs thorough analysis helping determine appropriate response under HIPAA.
• Reviews Privacy related contracts and supports low to moderate complexity contract redlining.
• Analyzes and categorizes Privacy risks identified by senior level Privacy Office workers to determine appropriate c