Senior Privacy Investigator & Compliance Lead

The University of Texas Southwestern Medical Center; Dallas (TX); On-site; USD 80,000 - 120,000; Full time

Benefits offered by this job

Healthcare benefits

Paid time off

Retirement programs

Paid parental leave

Tuition reimbursement

On-site childcare

Job summary

UT Southwestern Medical Center is seeking a Privacy Investigator to independently assess complex PHI access incidents, interview involved individuals, review electronic records, analyze evidence, and prepare comprehensive findings for Privacy and Compliance leadership.

This role involves conducting risk assessments, applying HIPAA breach frameworks, and guiding mitigation strategies to protect patient information and ensure regulatory compliance.

Qualifications

• Knowledge of privacy laws and HIPAA privacy rule.
• Ability to analyze data monitoring reports and evaluate compliance.
• Excellent written and verbal communication skills.

Responsibilities

• Serves as team leader and project manager for assurance reviews with goals, timelines and quality measures.
• Independently investigates alleged violations to determine cause, risk and prevention mechanisms.
• Conducts complex reviews of Privacy Office compliance activities and applies standards and policies.
• Monitors and evaluates effectiveness of compliance controls across departments.
• Drafts compliance reports with findings and recommended remedial actions.
• Maintains privacy office documentation and work papers for audits.

Skills

HIPAA privacy knowledge

Data analysis

Communication skills

Policy evaluation

Education

Bachelor's degree in business or healthcare administration OR related field

Job description

UT Southwestern Medical Center is seeking a Privacy Investigator to independently assess complex PHI access incidents, interview involved individuals, review electronic records, analyze evidence, and prepare comprehensive findings for Privacy and Compliance leadership.

This role involves conducting risk assessments, applying HIPAA breach frameworks, and guiding mitigation strategies to protect patient information and ensure regulatory compliance.