HIPAA Security Rule Analyst

Contract position in San Bernardino, CA, US

About the role

Evaluates County Fire and HCC Department compliance with HIPAA Security Rule Administrative (164.308), Physical (164.310), and Technical (164.312) Safeguards.

Responsibilities

• Review IT administrative policies, governance structures, and security roles/job descriptions for compliance gaps.
• Evaluate physical safeguards — buildings, equipment, intake areas — against 164.310 requirements.
• Review technical safeguards including access provisioning, mobile/remote access controls, and third-party data protections.
• Document control gaps at the IT-unit or County-wide level, as applicable.

Requirements

• 4+ years of HIPAA Security Rule compliance or healthcare IT security experience.
• Strong knowledge of 45 CFR 164.308/.310/.312 and NIST SP 800-53 mapping.

Qualifications

• CHPS (Certified in Healthcare Privacy and Security) or HCISPP certification (preferred).

Travel

Onsite for physical/technical safeguard verification at Arrowhead Regional Medical Center (Colton), County Fire (San Bernardino), and administrative offices in San Bernardino and Colton; remote for policy review and reporting.