Privacy Analyst

About the role

This job provides analytical support to various aspects of the enterprise-wide Privacy Program. Responsibilities include developing policies and procedures, privacy incident investigation, and response maintenance of privacy incident databases and workforce training.

Responsibilities

• Collaborate with business owners and other stakeholders to identify and develop, implement, and enhance privacy policies, procedures, and programs to meet or exceed privacy compliance requirements.
• Analyze privacy incidents, new initiatives, and process changes for compliance with international, federal, and state privacy and security laws, rules, and regulations.
• Provide analytical support to risk identification and stratification, which includes monitoring and preparing reports in a proactive fashion.
• Lead investigations of privacy and security incidents to determine facts, identify root cause, and thoroughly analyze scope of impact to provide comprehensive analysis with recommendations for resolution and risk mitigation.
• Absorb privacy investigations and ensure they are accurately documented and tasks are completed within required compliance timeframes and departmental standards.
• Assist with required HIPAA risk analysis and execution of any required notice to accounts and individuals.
• Maintain relationships with business owners in a variety of departments and subsidiaries within Highmark Health.
• Work closely with business owners throughout the enterprise to collaborate on key privacy and information management initiatives such as training, communication, and risk management.
• Participate in audits and cross-functional projects of various sizes and levels of complexity; serve as privacy subject matter expert throughout such projects.
• Provide technical, administrative, and analytical privacy assistance as required.
• Demonstrate and apply a thorough understanding of Highmark Health’s complex business processes and environment.
• Demonstrate and apply strong project management skills, inspire teamwork and responsibility with team members, and use current technology and tools to enhance the effectiveness of deliverables.

Requirements

Required: 3 years of relevant, progressive experience in the area of specialization. Exempted experience requirements effective August 2016.

Qualifications

• In depth knowledge of privacy laws and regulations including HIPAA, privacy and security breach notification rules and reporting requirements under federal and state privacy laws.
• Strong understanding of information management and privacy subject matter, as well as business and operational knowledge of Highmark Health and/or Insurance/healthcare industry and integrated hospital networks.
• Independent thinking capabilities, including analytical skills to review and articulate privacy compliance objectives and applicable guidance and regulations.
• Proficiency in investigative techniques including data analysis, risk analysis, risk mitigation, and causation inquiries.
• Ability to identify and evaluate risks in process workflows and human factors and prioritize and assess likelihood of risks.
• Strong communication skills including the ability to accurately describe complex workflows, fact patterns, and remediation plans clearly and succinctly for leadership.
• Ability to prepare written privacy notices concisely and accurately.
• Strong interpersonal skills; must be able to effectively resolve privacy issues and concerns. Working teams.

Skills

• Independent thinking capabilities, including analytical skills to review and articulate privacy compliance objectives and applicable guidance and regulations.
• Proficiency in investigative techniques including data analysis, risk analysis, risk mitigation, and causation inquiries.
• Ability to identify and evaluate risks in process workflows and human factors and prioritize and assess likelihood of risks.
• Strong communication skills including the ability to accurately describe complex workflows, fact patterns, and remediation plans clearly and succinctly for leadership.
• Ability to prepare written privacy notices concisely and accurately.
• Strong interpersonal skills; must be able to effectively resolve privacy issues and concerns. Working teams.

Benefits

Not specified.

Pay

Not specified.

Schedule

Hybrid based role in Pittsburgh, Camp Hill, Buffalo NY, Kansas City or Delaware - You are required to be onsite 3 days a week - T, W, Th.