Privacy Analyst III, Compliance

University of Texas Southwestern Medical Center; Dallas (TX); On-site; USD 95,000 - 140,000; Full time

Job summary

UT Southwestern Medical Center is seeking a senior Privacy Investigator to independently handle complex PHI access incidents, perform risk assessments, and prepare detailed reports for Privacy and Compliance leadership. You will help shape remediation strategies and enforce HIPAA privacy controls.

The role requires a Bachelor's degree and 5 years in healthcare compliance, with CHPC or CHC certification within 1 year.

Qualifications

• Bachelor's Degree in business or healthcare administration, nursing, regulatory compliance, consulting, project management, or related area.
• 5 years of professional experience in a healthcare compliance-related field.
• CHPC or CHC Certification within 1 year

Responsibilities

• Serves as team leader and project manager for complex assurance/effectiveness reviews and department projects.
• Independently performs investigations of alleged policy violations to determine cause and risk.
• Conducts privacy compliance reviews following HIPAA and university policies.
• Monitors and evaluates effectiveness of compliance controls in reviewed departments.
• Drafts compliance reports with findings and corrective actions.
• Maintains Privacy Office files and supports training materials.
• Builds relationships with compliance personnel and external stakeholders.
• Keeps current on HIPAA privacy rules and state privacy requirements.
• Develops and maintains privacy education and training materials.
• Guides policy development relating to privacy and security of patient information.
• Monitors electronic data transmission to ensure HIPAA privacy compliance.
• Performs other duties as assigned.

Skills

HIPAA Privacy Rule

Data analysis

Communication skills

Education

Bachelor's Degree

Tools

Excel

Word processing

Database applications

Job description

WHY UT SOUTHWESTERN?

With over 75 years of excellence in Dallas-Fort Worth, Texas, UT Southwestern is committed to excellence, innovation, teamwork, and compassion. As a world-renowned medical and research center, we strive to provide the best possible care, resources, and benefits for our valued employees. Ranked as the No. 1 hospital in Dallas-Fort Worth according to U.S. News & World Report, we invest in you with opportunities for career growth and development to align with your future goals. Our highly competitive benefits package offers healthcare, PTO and paid holidays, on-site childcare, wage, merit increases and so much more. We invite you to be a part of the UT Southwestern team where you'll discover a culture of teamwork, professionalism, and a rewarding career!

JOB SUMMARY

I independently investigate complex allegations involving inappropriate access, use, disclosure, or handling of protected health information (PHI) and other confidential information, including interviewing involved individuals, reviewing electronic records and audit logs, analyzing evidence, documenting findings, and recommending corrective actions. Conduct privacy risk assessments and determine the nature, scope, and severity of potential privacy incidents, including application of the HIPAA breach risk-assessment framework and evaluation of state-law notification requirements. Prepare comprehensive investigative reports, findings, and recommendations for Privacy and Compliance leadership and assist with determining appropriate mitigation, remediation, and disciplinary recommendations.

BENEFITS

UT Southwestern is proud to offer a competitive and comprehensive benefits package to eligible employees. Our benefits are designed to support your overall wellbeing, and include:

• PPO medical plan, available day one at no cost for full-time employee-only coverage
• 100% coverage for preventive healthcare-no copay
• Paid Time Off, available day one
• Retirement Programs through the Teacher Retirement System of Texas (TRS)
• Paid Parental Leave Benefit
• Wellness programs
• Tuition Reimbursement
• Public Service Loan Forgiveness (PSLF) Qualified Employer
• Learn more about these and other UTSW employee benefits!

EXPERIENCE AND EDUCATION

Required

• Education Bachelor's Degree in business or healthcare administration, nursing, regulatory compliance, consulting, project management, or related area.
• Experience 5 years of professional experience in a healthcare compliance-related field.
• Licenses and Certifications (CHPC) HEALTHCARE PRIVACY COMPLIANCE Certification in Healthcare Privacy Compliance (CHPC) from the Compliance Certification Board within 1 Year or Certification in Healthcare Compliance (CHC) from the Compliance Certification Board within 1 Year

JOB DUTIES

• Serves as team leader and project manager while conducting complex assurance/effectiveness reviews or other department projects, including the establishment of goals, objectives, timelines and quality measures for the team's work and deliverables.
• Independently performs investigations of alleged violations of policy, misconduct, or other acts of non-compliance to determine the cause, extent of risk and mechanisms for prevention.
• Conducts complex assurance/effectiveness reviews of Privacy Office compliance activities in accordance with appropriate standards, metrics, established compliance plan(s) and prescribed University and departmental, unit, or program policies.
• Monitors and evaluates effectiveness of compliance controls used by reviewed department, unit, or program, as well as compliance with all applicable university policies and procedures.
• Assist in drafting compliance reports, including development of review findings and recommendations for specific remedial or corrective actions.
• Prepares work papers to support work performed, as well as findings and recommendations included in compliance reports. Maintains documentation of Privacy Office files.
• Maintains effective working relationships with compliance personnel and external UTSW stakeholders to achieve objectives of assurance-related assignments.
• Remains abreast of current developments and revised laws and regulations pertaining to HIPAA Privacy compliance.
• Develops and maintains Privacy Office compliance-related education and training materials and conducts training sessions on compliance-related topics. Monitors effectiveness of training.
• Provides guidance to development of policies and procedures relating to privacy and security of patient medical information.
• Monitors and evaluates electronic medical data transmission process and/or electronic data surveillance to assure compliance with HIPAA Privacy Rule and related state privacy requirements (or University policy).
• Performs other duties, as assigned.

Knowledge, Skills and Abilities

• Work requires knowledge of privacy laws, regulations and current interpretations, particularly HIPAA Privacy Rule.
• Work requires skill in using spreadsheet applications, word processing, database applications, and ability to analyze data monitoring reports.
• Work requires ability to evaluate data and determine compliance with rules and regulations.
• Work requires excellent written and verbal communication skills.

PHYSICAL REQUIREMENTS/WORKING CONDITIONS

Working Conditions

• Clinical Setting
• Office Setting

Salary Information

Salary is commensurate with education, skills, and relevant experience.

SECURITY AND EEO STATEMENT

Security

This position is security-sensitive and subject to Texas Education Code 51.215, which authorizes UT Southwestern to obtain criminal history record information.

EEO

UT Southwestern Medical Center is committed to an educational and working environment that provides equal opportunity to all members of the University community. As an equal opportunity employer, UT Southwestern prohibits unlawful discrimination, including discrimination on the basis of race, color, religion, national origin, sex, sexual orientation, gender identity, gender expression, age, disability, genetic information, citizenship status, or veteran status.