Privacy Specialist

Jobtailor; Richmond (VA); On-site; USD 90,000 - 120,000; Full time

Job summary

Jobtailor is seeking a Privacy & Compliance professional to lead investigations, risk assessments, and reporting within a healthcare privacy context in Richmond, VA. The role requires coordinating with Legal, Compliance, IS, HIM, and operations to ensure regulatory readiness and defensible documentation.

Onsite presence in Richmond is required, with travel as needed. The candidate will develop dashboards, policies, and governance materials while supporting enterprise privacy initiatives and

Qualifications

• Bachelor’s degree in healthcare administration, compliance, public health, health information management, business administration, or a related field.
• Certification in healthcare privacy or compliance (e.g., CHPC, CHPS) or ability to obtain within one year of hire
• Minimum of 2 years of experience supporting healthcare privacy, compliance, health information management, or related functions within a healthcare organization or academic medical center
• Working knowledge of HIPAA Privacy Rule and familiarity with applicable healthcare privacy laws and regulations
• Experience supporting program, project, or governance activities, including tracking workplans, milestones, and action items
• Experience coordinating cross-functional activities in a matrixed environment under the direction of leadership
• Ability to support development of dashboards, reports, and governance materials for leadership review
• Must be local to Richmond, VA to come onsite as needed

Responsibilities

• Conduct privacy incident investigations from intake through resolution
• Perform access reviews and analyze audit logs for potential inappropriate access or disclosure
• Apply HIPAA breach risk assessment standards
• Develop findings, conclusions, recommendations, and defensible documentation
• Coordinate with Legal, Compliance, Information Security, HIM, and operational teams
• Prepare and maintain reports, dashboards, and metrics
• Contribute to regulatory readiness activities, audits, assessments, and documentation reviews
• Participate in enterprise initiatives including research privacy, vendor data use, interoperability, and AI governance
• Conduct privacy and compliance risk assessments with business owners
• Analyze investigation, audit, and reporting trends and recommend mitigation strategies
• Partner with Legal, Compliance, ISRM, HIM, IT/Epic, and operational teams
• Support training, education, and awareness activities
• Serve as a resource for privacy-related inquiries
• Improve investigation workflows, reporting processes, and documentation standards
• Develop standardized templates, tools, and tracking mechanisms

Skills

Privacy Investigation

HIPAA Knowledge

Cross-Functional Coordination

Policy Development

Dashboard & Reporting

Communication Skills

Project Governance

Education

Bachelor’s degree in healthcare administration/compliance/health information management/business administration

Tools

Epic

Metrics Tracking Tools

Reporting Tools

Compliance Management Software

Job description

• Conduct privacy incident investigations from intake through resolution, including fact gathering, interviews, and documentation
• Perform access reviews and analyze audit logs for potential inappropriate access or disclosure
• Apply HIPAA breach risk assessment standards
• Develop findings, conclusions, recommendations, and defensible documentation
• Coordinate with Legal, Compliance, Information Security, HIM, and operational teams
• Ensure timely case progression and closure
• Coordinate privacy operations, track initiatives, maintain workflows, and coordinate cross-functional activities
• Support development, review, and maintenance of privacy policies, procedures, and standards
• Prepare and maintain reports, dashboards, and metrics
• Contribute to regulatory readiness activities, audits, assessments, and documentation reviews
• Participate in enterprise initiatives including research privacy, vendor data use, interoperability, and AI governance
• Conduct privacy and compliance risk assessments with business owners
• Analyze investigation, audit, and reporting trends and recommend mitigation strategies
• Partner with Legal, Compliance, ISRM, HIM, IT/Epic, and operational teams
• Support training, education, and awareness activities
• Serve as a resource for privacy-related inquiries
• Improve investigation workflows, reporting processes, and documentation standards
• Develop standardized templates, tools, and tracking mechanisms

Requirements

• Bachelor’s degree in healthcare administration, compliance, public health, health information management, business administration, or a related field
• Certification in healthcare privacy or compliance (e.g., CHPC, CHPS) or ability to obtain within one year of hire
• Minimum of 2 years of experience supporting healthcare privacy, compliance, health information management, or related functions within a healthcare organization or academic medical center
• Working knowledge of HIPAA Privacy Rule and familiarity with applicable healthcare privacy laws and regulations
• Experience supporting program, project, or governance activities, including tracking workplans, milestones, and action items
• Experience coordinating cross-functional activities in a matrixed environment under the direction of leadership
• Ability to support development of dashboards, reports, and governance materials for leadership review
• Strong written and verbal communication skills appropriate for professional and operational audiences
• Ability to support initiatives, follow established processes, and elevate issues appropriately
• Must be local to Richmond, VA to come onsite as needed
• Ability to travel by car to off-site locations, occasionally in adverse weather conditions

Core Competencies

Demonstrates expertise in conducting privacy incident investigations, applying HIPAA standards, and coordinating cross-functional activities within healthcare organizations. Proficient in developing reports, dashboards, and compliance documentation while ensuring regulatory readiness and effective communication with stakeholders.

Highest-signal resume keywords

• HIPAA Privacy Rule Knowledge
• Healthcare Privacy Compliance
• Privacy Incident Investigation
• Cross-Functional Coordination
• Healthcare Privacy Certification

Hard Skills

• Privacy Incident Investigation
• Access Review
• Audit Log Analysis
• Risk Assessment
• Documentation Development
• Dashboard Development
• Reporting
• Compliance Standards
• Data Governance
• Workflow Improvement

Soft Skills

• Strong Written Communication
• Strong Verbal Communication
• Collaboration
• Problem-Solving
• Attention to Detail

Certifications & Qualifications

• CHPC
• CHPS

Industry Keywords

• Healthcare Administration
• Health Information Management
• Compliance
• Regulatory Readiness
• Privacy Policies
• Operational Teams
• Matrixed Environment

Tools & Technologies

• Epic
• Metrics Tracking Tools
• Reporting Tools
• Compliance Management Software