Privacy Analyst

About the role

HCSC is looking for a dynamic Privacy Analyst to join its Richardson, TX office. This role supports the organization's privacy program by ensuring compliance with HIPAA, HITECH, state privacy regulations, and organizational policies related to protected health information (PHI). The position is hybrid/flex, requiring in-office visibility three days per week and remote work for the other two days. Relocation and sponsorship are not available.

Responsibilities

• Manage responsibilities within the HCSC Privacy Office, supporting low and moderate risk issues and departments to ensure compliance with federal and state regulations.
• Support senior-level Privacy Office workers and other HCSC departments regarding policies, procedures, and process flows on an annual and ad-hoc basis.
• Coordinate, validate, and support monthly, quarterly, and annual reports regarding core Privacy Office functions.
• Support updates to Privacy Office policies and procedures, ensuring training, preemption, and complaint information for employees are accurate.
• Facilitate changes in departmental policies/procedures resulting from internal audit/compliance activities.
• Track and triage complaints, notifying senior-level Privacy Office workers of upcoming response deadlines.
• Monitor HCSC disclosures, analyzing and identifying low to moderate risk practices for solutioning with senior-level staff.
• Support, facilitate, and coordinate Privacy Risk Assessment completion, analyzing risk based on HIPAA criteria or breach analysis requirements.
• Review Privacy-related contracts and support low to moderate complexity contract redlining.
• Analyze and categorize Privacy risks to determine appropriate corrective actions.
• Produce regular reports for senior-level Privacy Office workers regarding incident types, volumes, and areas involved, and track issues through resolution.
• Gather privacy case, incident, contract, privacy risk, and compliance data from multiple sources and systems, reviewing standard reports for accuracy and preparing non-standard reports.
• Support senior-level Privacy Office workers with ongoing or new privacy-related projects or initiatives.
• Complete HIPAA-compliant responses and notices to state and federal regulators.
• Actively support and cooperate with the Office of Civil Rights, legal entities, and HCSC officers in Privacy compliance reviews or investigations.
• Maintain complete confidentiality of company business.

Requirements

• Bachelor’s Degree (preferably in Healthcare Administration, Health Information Management, Business Administration, or Compliance) OR 4 years of direct work experience in healthcare privacy, compliance, health information management, auditing, or related areas.
• Knowledge of the healthcare industry.
• Decision-making skills and analytical abilities.
• Excellent verbal and written communication skills, listening skills, and organizational skills.
• Ability to work with peers and resolve issues or complete projects/initiatives.
• Strong analytical and problem-resolution skills.
• Ability to work with highly sensitive and confidential information while managing multiple priorities.
• PC proficiency, including MS Office applications (Word, Excel, PowerPoint, Workday, Co-Pilot) and healthcare technology systems.

Preferred Qualifications

• Strong HCSC organizational knowledge.
• Working knowledge of HIPAA Privacy Rule, HIPAA Security Rule, HITECH, and healthcare privacy regulations.
• Certification in Healthcare Privacy and Security (CHPS), Certified Information Privacy Professional (CIPP/US), Certified in Healthcare Compliance (CHC), or similar.
• Knowledge of privacy monitoring tools, access management, and audit reporting systems (e.g., Tableau, Power BI, ERP).

Pay

$45,900.00 - $102,100.00. Exact compensation may vary based on skills, experience, and location.