Privacy Analyst III, Compliance

The University of Texas Southwestern Medical Center; Dallas (TX); On-site; USD 80,000 - 120,000; Full time

Benefits offered by this job

Healthcare benefits

Paid time off

Retirement programs

Paid parental leave

Tuition reimbursement

On-site childcare

Job summary

UT Southwestern Medical Center is seeking a Privacy Investigator to independently assess complex PHI access incidents, interview involved individuals, review electronic records, analyze evidence, and prepare comprehensive findings for Privacy and Compliance leadership.

This role involves conducting risk assessments, applying HIPAA breach frameworks, and guiding mitigation strategies to protect patient information and ensure regulatory compliance.

Qualifications

• Knowledge of privacy laws and HIPAA privacy rule.
• Ability to analyze data monitoring reports and evaluate compliance.
• Excellent written and verbal communication skills.

Responsibilities

• Serves as team leader and project manager for assurance reviews with goals, timelines and quality measures.
• Independently investigates alleged violations to determine cause, risk and prevention mechanisms.
• Conducts complex reviews of Privacy Office compliance activities and applies standards and policies.
• Monitors and evaluates effectiveness of compliance controls across departments.
• Drafts compliance reports with findings and recommended remedial actions.
• Maintains privacy office documentation and work papers for audits.

Skills

HIPAA privacy knowledge

Data analysis

Communication skills

Policy evaluation

Education

Bachelor's degree in business or healthcare administration OR related field

Job description

WHY UT SOUTHWESTERN?

With over 75 years of excellence in Dallas-Fort Worth, Texas, UT Southwestern is committed to excellence, innovation, teamwork, and compassion. As a world-renowned medical and research center, we strive to provide the best possible care, resources, and benefits for our valued employees. Ranked as the No. 1 hospital in Dallas-Fort Worth according to U.S. News & World Report, we invest in you with opportunities for career growth and development to align with your future goals. Our highly competitive benefits package offers healthcare, PTO and paid holidays, on-site childcare, wage, merit increases and so much more. We invite you to be a part of the UT Southwestern team where you'll discover a culture of teamwork, professionalism, and a rewarding career!

JOB SUMMARY

I independently investigate complex allegations involving inappropriate access, use, disclosure, or handling of protected health information (PHI) and other confidential information, including interviewing involved individuals, reviewing electronic records and audit logs, analyzing evidence, documenting findings, and recommending corrective actions. Conduct privacy risk assessments and determine the nature, scope, and severity of potential privacy incidents, including application of the HIPAA breach risk-assessment framework and evaluation of state-law notification requirements. Prepare comprehensive investigative reports, findings, and recommendations for Privacy and Compliance leadership and assist with determining appropriate mitigation, remediation, and disciplinary recommendations.

BENEFITS

UT Southwestern is proud to offer a competitive and comprehensive benefits package to eligible employees. Our benefits are designed to support your overall wellbeing, and include:

• PPO medical plan, available day one at no cost for full-time employee-only coverage
• Paid Time Off, available day one
• Retirement Programs through the Teacher Retirement System of Texas (TRS)
• Paid Parental Leave Benefit
• Wellness programs
• Tuition Reimbursement
• Public Service Loan Forgiveness (PSLF) Qualified Employer
• Education

  Bachelor's Degree in business or healthcare administration, nursing, regulatory compliance, consulting, project management, or related area.

• Experience

  5 years of professional experience in a healthcare compliance-related field.

• Licenses and Certifications

  (CHPC) HEALTHCARE PRIVACY COMPLIANCE Certification in Healthcare Privacy Compliance (CHPC) from the Compliance Certification Board within 1 Year or Certification in Healthcare Compliance (CHC) from the Compliance Certification Board within 1 Year

JOB DUTIES

• Serves as team leader and project manager while conducting complex assurance/effectiveness reviews or other department projects, including the establishment of goals, objectives, timelines and quality measures for the team's work and deliverables.
• Independently performs investigations of alleged violations of policy, misconduct, or other acts of non-compliance to determine the cause, extent of risk and mechanisms for prevention.
• Conducts complex assurance/effectiveness reviews of Privacy Office compliance activities in accordance with appropriate standards, metrics, established compliance plan(s) and prescribed University and departmental, unit, or program policies.
• Monitors and evaluates effectiveness of compliance controls used by reviewed department, unit, or program, as well as compliance with all applicable university policies and procedures.
• Assist in drafting compliance reports, including development of review findings and recommendations for specific remedial or corrective actions.
• Prepares work papers to support work performed, as well as findings and recommendations included in compliance reports. Maintains documentation of Privacy Office files.
• Maintains effective working relationships with compliance personnel and external UTSW stakeholders to achieve objectives of assurance-related assignments.
• Remains abreast of current developments and revised laws and regulations pertaining to HIPAA Privacy compliance.
• Develops and maintains Privacy Office compliance-related education and training materials and conducts training sessions on compliance-related topics. Monitors effectiveness of training.
• Provides guidance to development of policies and procedures relating to privacy and security of patient medical information.
• Monitors and evaluates electronic medical data transmission process and/or electronic data surveillance to assure compliance with HIPAA Privacy Rule and related state privacy requirements (or University policy).
• Performs other duties, as assigned.

Knowledge, Skills and Abilities

• Work requires knowledge of privacy laws, regulations and current interpretations, particularly HIPAA Privacy Rule.
• Work requires skill in using spreadsheet applications, word processing, database applications, and ability to analyze data monitoring reports.
• Work requires ability to evaluate data and determine compliance with rules and regulations.
• Work requires excellent written and verbal communication skills.

PHYSICAL REQUIREMENTS/WORKING CONDITIONS

Working Conditions

• Clinical Setting
• Office Setting

Salary Information

Salary is commensurate with education, skills, and relevant experience.

SECURITY AND EEO STATEMENT

Security

This position is security-sensitive and subject to Texas Education Code 51.215, which authorizes UT Southwestern to obtain criminal history record information.

EEO

UT Southwestern Medical Center is committed to an educational and working environment that provides equal opportunity to all members of the University community. As an equal opportunity employer, UT Southwestern prohibits unlawful discrimination, including discrimination on the basis of race, color, religion, national origin, sex, sexual orientation, gender identity, gender expression, age, disability, genetic information, citizenship status, or veteran status.

UT Southwestern Medical Center is committed to an educational and working environment that provides equal opportunity to all members of the University community. In accordance with federal and state law, the University prohibits unlawful discrimination, including harassment, on the basis of: race; color; religion; national origin; gender, including sexual harassment; age; disability; citizenship; and veteran status. In addition, it is UT Southwestern policy to prohibit discrimination on the basis of sexual orientation, gender identity, or gender expression.

Copyright 2017.The University of Texas Southwestern Medical Center5323 Harry Hines Blvd., Dallas, Texas 75390Phone [phone]