Privacy Analyst III, Compliance

UT Southwestern Medical Center; Dallas (TX); On-site; USD 110,000 - 150,000; Full time

Job summary

UT Southwestern Medical Center in Dallas seeks a Privacy Compliance professional to independently investigate complex PHI access and handling incidents, conduct risk assessments, and prepare comprehensive investigative reports for leadership. You will apply HIPAA breach risk frameworks and advise on mitigation and disciplinary actions.

The role requires a Bachelor’s degree in a related field and 5 years in healthcare compliance, with CHPC/CHC certification within a year.

Qualifications

• Bachelor's degree in business or healthcare administration, nursing, regulatory compliance, consulting, project management, or related area.
• At least 5 years of professional experience in a healthcare compliance-related field.
• Certification in Healthcare Privacy (CHPC) or Certification in Healthcare Compliance (CHC) within 1 year.

Responsibilities

• Lead complex assurance/effectiveness reviews and manage team goals, timelines and quality measures.
• Investigate alleged policy violations, assess risk, and determine prevention mechanisms.
• Conduct reviews of Privacy Office activities following applicable standards and policies.
• Monitor and evaluate the effectiveness of compliance controls across departments.
• Draft compliance reports with findings and remedial actions and prepare supporting work papers.
• Maintain Privacy Office documentation and liaison with internal and external stakeholders.
• Stay updated on HIPAA Privacy Rule and state privacy requirements; train staff accordingly.

Skills

Healthcare compliance

Privacy risk assessment

Project management

Leadership

Education

Bachelor's degree in health administration/related field

Tools

CHPC/CHC certifications

Job description

WHY UT SOUTHWESTERN?

With over 75 years of excellence in Dallas-Fort Worth, Texas, UT Southwestern is committed to excellence, innovation, teamwork, and compassion. As a world-renowned medical and research center, we strive to provide the best possible care, resources, and benefits for our valued employees. Ranked as the No. 1 hospital in Dallas-Fort Worth according to U.S. News & World Report , we invest in you with opportunities for career growth and development to align with your future goals. Our highly competitive benefits package offers healthcare, PTO and paid holidays, on-site childcare, wage, merit increases and so much more. We invite you to be a part of the UT Southwestern team where you'll discover a culture of teamwork, professionalism, and a rewarding career!

JOB SUMMARY

I ndependently investigate complex allegations involving inappropriate access, use, disclosure, or handling of protected health information (PHI) and other confidential information, including interviewing involved individuals, reviewing electronic records and audit logs, analyzing evidence, documenting findings, and recommending corrective actions. Conduct privacy risk assessments and determine the nature, scope, and severity of potential privacy incidents, including application of the HIPAA breach risk-assessment framework and evaluation of state-law notification requirements. Prepare comprehensive investigative reports, findings, and recommendations for Privacy and Compliance leadership and assist with determining appropriate mitigation, remediation, and disciplinary recommendations.

BENEFITS

UT Southwestern is proud to offer a competitive and comprehensive benefits package to eligible employees. Our benefits are designed to support your overall wellbeing, and include:

• PPO medical plan, available day one at no cost for full-time employee-only coverage
• 100% coverage for preventive healthcare-no copay
• Paid Time Off, available day one
• Retirement Programs through the Teacher Retirement System of Texas (TRS)
• Paid Parental Leave Benefit
• Wellness programs
• Tuition Reimbursement
• Public Service Loan Forgiveness (PSLF) Qualified Employer

Learn more about these and other UTSW employee benefits!

EXPERIENCE AND EDUCATION

Required

Education

• Bachelor's Degree in business or healthcare administration, nursing, regulatory compliance, consulting, project management, or related area.

Experience

• 5 years of professional experience in a healthcare compliance-related field.

Licenses and Certifications

• (CHPC) HEALTHCARE PRIVACY COMPLIANCE Certification in Healthcare Privacy Compliance (CHPC) from the Compliance Certification Board within 1 Year or
• Certification in Healthcare Compliance (CHC) from the Compliance Certification Board within 1 Year

JOB DUTIES

• Serves as team leader and project manager while conducting complex assurance/effectiveness reviews or other department projects, including the establishment of goals, objectives, timelines and quality measures for the team's work and deliverables.
• Independently performs investigations of alleged violations of policy, misconduct, or other acts of non-compliance to determine the cause, extent of risk and mechanisms for prevention.
• Conducts complex assurance/effectiveness reviews of Privacy Office compliance activities in accordance with appropriate standards, metrics, established compliance plan(s) and prescribed University and departmental, unit, or program policies.
• Monitors and evaluates effectiveness of compliance controls used by reviewed department, unit, or program, as well as compliance with all applicable university policies and procedures.
• Assist in drafting compliance reports, including development of review findings and recommendations for specific remedial or corrective actions.
• Prepares work papers to support work performed, as well as findings and recommendations included in compliance reports. Maintains documentation of Privacy Office files.
• Maintains effective working relationships with compliance personnel and external UTSW stakeholders to achieve objectives of assurance-related assignments.
• Remains abreast of current developments and revised laws and regulations pertaining to HIPAA Privacy compliance.
• Develops and maintains Privacy Office compliance-related education and training materials and conducts training sessions on compliance-related topics. Monitors effectiveness of training.
• Provides guidance to development of policies and procedures relating to privacy and security of patient medical information.
• Monitors and evaluates electronic medical data transmission process and/or electronic data surveillance to assure compliance with HIPAA Privacy Rule and related state privacy requirements (or University policy).
• Performs other duties, as assigned.

Knowledge, Skills and Abilities

Work requires knowledge of privacy laws, regulations and current interpretations, particularly HIPAA Privacy Rule.

Work requires skill in using spreadsheet applications, word processing, database