HIPAA/Security Privacy Field Auditor

About the role

The Privacy Analyst, working closely with the Privacy Team and client, will be a key contributor in providing privacy services to the DHS Privacy Office. These services include: Carry out scheduled privacy reviews and on-site facility walkthroughs, evaluating the effectiveness of privacy programs, assessing risks, and vulnerabilities, identifying control gaps, reviewing reports for consistency and accuracy, managing remediation efforts. The candidate may also conduct independent privacy assessments or contribute to privacy independent verification and validation (IV&V) activities.

Job Responsibilities

• Carry out scheduled privacy reviews and on-site facility walkthroughs according to the audit plan.
• Identify and document findings; route field observations to the privacy and GRC teams as risk intelligence.
• Review field-observable safeguards and flag gaps.
• Independently verify that corrective and preventive actions resolve findings.
• Build and maintain working relationships across locations that give the privacy program visibility into field operations.
• Produce clear, consistent reporting on reviews, findings and field observations for privacy leadership.

Qualifications

• Minimum six years combined experience working with: PHI in a healthcare or human-services setting, such as health information management (HIM), compliance, release of information, or clinical operations.
• HIPAA Privacy and Security Rules
• Conducting structured reviews and documenting findings clearly and consistently.
• Undergraduate degree or 6 or more years relevant experience
• Reside or relocate themselves to the Little Rock AR or central AR area.

Preferred Skills

• Hold one or more privacy certifications such as IAPP, CHPC, CIPP, and/or CISA
• Experience working with State DHS Privacy and/or Security
• Comprehensive understanding of security and privacy controls
• Exceptional analytical, communication, and collaboration skills
• Thorough understanding of HIPAA, NIST and CMS Certification Frameworks
• Advanced client and vendor relationship management
• Building working relationships across a distributed, multi-site organization.