Privacy Analyst

About the Role

Investigates potential privacy breaches and noncompliance with Bon Secours Mercy Health (BSMH) Privacy/HIPAA-related policies. The Analyst implements and administers BSMH’s Privacy policies and procedures, ensuring compliance with HIPAA, HITECH, and state-mandated privacy and confidentiality requirements. This is primarily a remote, work-from-home position with occasional onsite requirements (approximately 2-3 times per month).

Responsibilities

• Investigates, documents, and reports on issues related to privacy and confidentiality of Protected Health Information (PHI) under HIPAA.
• Reports breaches to the DHHS Office for Civil Rights (OCR) in compliance with governing federal laws and prepares breach notification letters per BSMH policies.
• Requests data and/or access audits of electronic systems and incorporates audit findings into investigations.
• Creates and maintains electronic documentation for privacy incident investigations, resolutions, and corrective actions/sanctions.
• Meets regularly with and keeps the Director of Privacy apprised of the status of all investigations and projects.
• Ensures corrective action plans addressing HIPAA are implemented and functional.
• Maintains confidentiality of investigations.
• Travels, if required by the Director of Privacy and approved by the VP of Compliance and Privacy, to complete on-site education and investigations.

This document is not an exhaustive list of all responsibilities, skills, duties, or working conditions. Employees may be required to perform other job-related duties as assigned.

Requirements

• 4-6 years’ experience working with HIPAA and HITECH privacy rules or related compliance areas (required).
• Prior healthcare experience (preferred).
• EPIC Electronic Health Record experience (preferred).

Qualifications

• Bachelor’s degree in Business Administration, Health Care Management, Nursing, or Health Information Management (preferred).
• Certified in Healthcare Privacy Compliance – Health Care Compliance Association (preferred).
• Certified Information Privacy Manager – International Association of Privacy Professionals (preferred).

Benefits

• Competitive pay, incentives, referral bonuses, and 403(b) with employer contributions (when eligible).
• Medical, dental, vision, prescription coverage, HSA/FSA options, life insurance, mental health resources, and discounts.
• Paid time off, parental and FMLA leave, short- and long-term disability, backup care for children and elders.
• Tuition assistance, professional development, and continuing education support.

Benefits may vary based on the market and employment status.