Our client, a high-growth leader in the healthcare technology space, is seeking a Senior Privacy Analyst to join its team on a contract basis. This fully remote role will play a key part in triaging and investigating privacy incidents involving PHI in accordance with HIPAA and state privacy laws. The analyst will review technical audit logs, document investigations, determine breach status, and help implement corrective actions or training across teams. Additional responsibilities include managing third-party privacy inquiries, supporting audits, and contributing to the development of privacy policies, trainings, and programs. Ideal candidates will bring significant experience supporting HIPAA-based privacy programs, strong investigative skills, and sound judgment in a fast-paced, compliance-driven environment. This is a 6-month contract role with an immediate start, and potential for full-time conversion in select states. Preference will be given to candidates with CHPC certification.
What you'll do:
- Manage privacy incidents, including breaches, involving protected health information (PHI)
- Review all facets of a privacy incident to understand causation and responsibility including the review of audit or other technical logs
- Document all aspects of the privacy incident review/investigation
- Apply privacy laws to each incident to assist in making breach determinations
- Work across teams to implement appropriate training and/or corrective actions to prevent re-occurrence
- Responsible for assisting with any third-party, privacy-based inquiries, audits or investigations
- Review of audit trails or logs
- Documentation of audit/investigative efforts
- Produce reports to assist with audits/investigations
- Responsible for assisting the Privacy Officer with operational aspects of the Privacy Program including:
- Drafting, review and maintenance of policies and procedures
- Creation and maintenance of trainings
- Implementation of system-wide privacy projects/programs
- Experience working in healthcare, with significant experience serving in a role supporting a HIPAA-based privacy program
- Experience conducting access reviews with monitoring systems (i.e., Imprivata), including managing ensuing privacy investigations
- Knowledge of privacy laws and regulations, including HIPAA
- Outstanding judgment
- Ability to work both independently and as part of multidisciplinary teams
- Nice to have: HCCA’s CHPC certification