Privacy Analyst

UNIVERSITY OF ARIZONA; Tucson (AZ); Hybrid; USD 65,000 - 90,000; Full time

Job summary

The University of Arizona seeks a Privacy Analyst to support the privacy program by monitoring compliance with federal, state, and international regulations and internal policies. Reporting to the HIPAA Privacy Officer, you will assist with investigations, breach risk assessments, documentation, reporting, and mitigation activities.

You will collaborate with cross-functional teams, contribute to privacy communications and training, participate in privacy assessments, and coordinate program

Qualifications

• Knowledge of privacy laws (e.g., GDPR, HIPAA) and compliance standards.
• Understanding of cyber security and risk management.
• Strong communication skills for articulating privacy risks and policies.
• Strong critical thinking skills and the ability to assess how privacy requirements apply to situations.
• Strong interpersonal skills and the ability to build partnerships across teams.
• Ability to collaborate with stakeholders on privacy matters.
• Ability to develop and enforce privacy policies.
• Ability to review contracts and data access requests for privacy compliance.
• Ability to translate complex privacy concepts into practical guidance.
• Familiarity with HIPAA requirements, Business Associate Agreements, or other regulated-data environments.

Responsibilities

• Coordinates program activities across departments and colleges designated as HIPAA Covered Components within the HIPAA Privacy Program.
• Participates in the annual review of HIPAA Covered Components and the annual HIPAA risk assessment process.
• Documents results of the annual assessments; tracks action items and remediation activities.
• Coordinates the review and tracking of Business Associate Agreements; performs vendor privacy risk assessments; coordinates the Authorization to Operate process for certain applications storing or processing regulated data.
• Partners with cross-functional teams to ensure appropriate safeguards and documentation are in place.
• Supports privacy communication and training initiatives, including the development and updating of privacy training and marketing communications.
• Coordinates with human resources on training delivery, tracking, and reporting.
• Supports privacy incident response activities, including incident intake, investigation, documentation, issue tracking, and remediation.
• Prepares summary reports for presentation to senior management and other stakeholders.
• Maintains current knowledge of applicable privacy laws and accreditation standards; supports policy maintenance.

Job description

Position Highlights

The Privacy Analyst supports the University of Arizona’s privacy program by assisting in the monitoring of compliance with federal, state, and international regulations, as well as internal policies and emerging privacy requirements. Reporting to the HIPAA Privacy Officer, this role supports the investigation of potential privacy incidents, contributes to breach risk assessments, and assists with required documentation, reporting, and mitigation activities. The Privacy Analyst collaborates with cross-functional teams to support privacy communication and training initiatives, participate in privacy assessments, and coordinate program activities across departments and colleges within the HIPAA Privacy Program.

Visa sponsorship is not available for this position.

Outstanding U of A benefits include health, dental, and vision insurance plans; life insurance and disability programs; paid vacation, sick leave, and holidays; U of A/ASU/NAU tuition reduction for the employee and qualified family members; retirement plans; access to U of A recreation and cultural activities; and more!

The University of Arizona has been recognized for our innovative work-life programs.

Duties & Responsibilities

HIPAACompliance Program:

• Coordinates program activities across departments and colleges designated as HIPAA Covered Components within the HIPAA Privacy Program.
• Participates in the annual review of HIPAA Covered Components and the annual HIPAA risk assessment process.
• Documents results of the annual assessments; tracks action items and remediation activities.

VendorPrivacy Support:

• Coordinates the review and tracking of Business Associate Agreements; performs vendor privacy risk assessments; coordinates the Authorization to Operate process for certain applications storing or processing regulated data.
• Partners with cross-functional teams to ensure appropriate safeguards and documentation are in place.

Trainingand Awareness Support:

• Supports privacy communication and training initiatives, including the development and updating of privacy training and marketing communications.
• Coordinates with human resources on training delivery, tracking, and reporting.

PrivacyIncident Intake and Investigation:

• Supports privacy incident response activities, including incident intake, investigation, documentation, issue tracking, and remediation.
• Prepares summary reports for presentation to senior management and other stakeholders.

PrivacyProgram Support:

• Maintains current knowledge of applicable federal, state, and international privacy related laws, regulations, and accreditation standards.
• Supports the development, maintenance, and annual review of university privacy policies and procedures.
• Other Duties as Assigned.

Knowledge, Skills, and Abilities

• Knowledge of privacy laws (e.g., GDPR, HIPAA) and compliance standards.
• Understanding of other key subjects including cyber security and risk management.
• Strong communication skills for articulating privacy risks and policies.
• Strong critical thinking skills and the ability to assess how state, federal, and international privacy requirements apply to specific situations.
• Strong interpersonal skills and a commitment to fostering productive, respectful partnerships across teams and roles.
• Ability to collaborate with stakeholders on privacy matters.
• Ability to develop and enforce privacy policies.
• Ability to meticulously review contracts and data access requests for privacy compliance.
• Ability to translate complex privacy concepts into practical, easy-to-understand guidance for a variety of audiences.
• Familiarity with HIPAA requirements, Business Associate Agreements, or other regulated-data environments.
• Dem