HIPAA Privacy Analyst

What You Will Do

• Collaborates with Privacy leadership and builds strong working relationships with internal business partners to support privacy compliance efforts.
• Serves as initial point of contact for routine privacy questions, concerns, and incident inquiries, partnering with internal stakeholders to ensure timely resolution.
• Independently and collaboratively conducts investigations, prepares clear, comprehensive summaries of findings, and provides actionable recommendations based on audit or investigation outcomes.
• Tracks, manages, and documents privacy audits, investigations, and outcomes.
• Captures, documents, tracks, investigates, and resolves complaints related to MLH’s privacy policies and procedures.
• Proactively resolves privacy issues by identifying the root cause and escalating matters to the appropriate organizational leadership team(s) and Associate Relations when necessary.
• Reports suspected violations of laws and regulations or non-compliance to MLH policy ensuring appropriate follow-up and resolution.
• Serves as a lead resource on initiating, distributing, and maintaining Business Associate Agreements, Data Use Agreements, and other privacy related documents.
• Protects and maintains the confidentiality of PHI, PII, and all audit or investigation documentation.
• Completes complex trend analysis to identify emerging privacy risks and compliance gaps.
• Identifies opportunities for process improvement within the privacy program and across business operations.
• Maintains discretion, professionalism, and sound judgment in all interactions and decision making.
• Performs special projects as assigned by the Privacy and/or Legal Leadership team.

Education Qualifications

• Required: Bachelor's Degree in Business Administration/Management, Health Information Management, Healthcare Administration, or related field.
• PREFERRED: Master's Degree in Health Information Management, Business Administration, Healthcare Administration, or related field.

Experience Qualifications

• Required: 3-5 years of experience in HIM, medical records auditing, conducting investigations, monitoring standards, regulatory compliance, or related fields.

Skills And Abilities

• Demonstrated knowledge and understanding of Health Insurance Portability and Accountability Act (HIPAA) as well as applicable federal regulations and laws affecting the management of confidential protected health information (PHI) and personally identifiable information (PII).
• Critical thinking skills with the ability to independently solve problems with data.
• Strong planning, organizational, project management, problem-solving, and analytical skills.
• Excellent interpersonal and oral/written communication skills, and process management skills.
• Experience with EMR/EHR systems.
• Knowledge and skills with use of computers and software programs, including MS Word, PowerPoint, and Excel.

Licenses and Certifications

• Required: Registered Health Information Administrator - American Health Information Management Association.

Physical Demands

• The physical activities of this position may include climbing, pushing, standing, hearing, walking, reaching, grasping, kneeling, stooping, and repetitive motion.
• Must have good balance and coordination.
• The physical requirements of this position are: light work - exerting up to 25 lbs. of force occasionally and/or up to 10 lbs. of force frequently.
• The Associate is required to have close visual acuity to perform an activity, such as preparing and analyzing data and figures; transcribing; viewing a computer terminal; or extensive reading.
• The conditions to which the Associate will be subject in this position: The Associate is not substantially exposed to adverse environmental conditions; job functions are typically performed under conditions such as those found in general office or administrative work.