Senior Privacy Analyst

System Soft Technologies; Montgomery (AL); On-site; USD 75,000 - 110,000; Full time

Job summary

System Soft Technologies is seeking a Senior Privacy Analyst to support the Agency Privacy Officer in the day-to-day operation of the privacy program. The role involves reviewing, tracking, coordinating, and documenting privacy-sensitive requests and incidents involving Medicaid applicants, recipients, and beneficiaries, as well as PHI and PII.

Responsibilities include processing access requests, applying HIPAA privacy requirements, and ensuring compliance with Medicaid confidentiality rules.

Qualifications

• Working knowledge of HIPAA Privacy Rule and Breach Notification requirements.
• Knowledge of Medicaid confidentiality requirements, including 42 CFR Part 431, Subpart F.
• Understanding of 42 CFR Part 2 considerations.
• Experience reviewing subpoenas, court orders, HIPAA authorizations, access requests, and privacy incident reports.
• Strong analytical, documentation, compliance, and problem-solving skills.

Responsibilities

• Process and review access requests, information-gathering requests, disclosures, HIPAA authorizations, subpoenas, and privacy incidents.
• Apply HIPAA Privacy and Breach Notification requirements.
• Ensure compliance with Medicaid confidentiality requirements and regulations.
• Review requests and incidents for privacy risks and compliance concerns.
• Verify identity and authority while adhering to minimum necessary standards.
• Conduct remote and onsite privacy assessments and follow escalation procedures.
• Assist with development, implementation, maintenance, and documentation of the Agency privacy program.
• Participate in audits conducted by SSA, IRS, HHS, CMS, OCR, State Examiner’s Board, and other oversight agencies.

Skills

HIPAA knowledge

Privacy compliance

Analytical skills

Documentation

Problem-solving

Regulatory understanding

Job description

The Senior Privacy Analyst supports the Agency Privacy Officer in the day-to-day operation of the Agency’s privacy program. Reviews, tracks, coordinates, and documents privacy-sensitive requests and incidents involving Medicaid applicants, recipients, and beneficiaries; claims, eligibility, and enrollment information; provider and program integrity data; PHI; and PII.

Responsibilities

Process and review individual access requests, information-gathering requests, recipient-directed disclosures, HIPAA authorizations, subpoenas and legal requests, privacy complaints, privacy incidents, and breach reporting activities.

Apply HIPAA Privacy and Breach Notification requirements.

Ensure compliance with Medicaid confidentiality requirements and regulations.

Review requests and incidents for privacy risks and compliance concerns.

Verify identity and authority while adhering to minimum necessary standards.

Conduct remote and onsite privacy assessments and follow escalation procedures.

Program Support & Audit Participation

Assist with development, implementation, maintenance, and documentation of the Agency privacy program.

Participate in audits conducted by SSA, IRS, HHS, CMS, OCR, State Examiner’s Board, and other oversight agencies.

Qualifications

Working knowledge of HIPAA Privacy Rule and Breach Notification requirements.

Knowledge of Medicaid confidentiality requirements, including 42 CFR Part 431, Subpart F.

Understanding of 42 CFR Part 2 considerations.

Experience reviewing subpoenas, court orders, HIPAA authorizations, access requests, and privacy incident reports.

Strong analytical, documentation, compliance, and problem-solving skills.

Regulatory Knowledge Areas

• HIPAA Privacy Rule
• Medicaid Confidentiality Requirements
• 42 CFR Part 431, Subpart F
• 42 CFR Part 2
• PHI and PII Protection Standards
• Minimum Necessary Standard
• Identity and Authority Verification Requirements