Privacy Analyst

Position: Privacy Analyst Duration: 12 Months Location: Montgomery, AL (Onsite from day 1) Job ID: #13050 Agency: Medicaid Anticipated start date: 09/01/2026 Interview Types: Video/In Person based on location Position Summary The Senior Privacy Analyst supports the Agency Privacy Officer in the day-to-day operation of the Agency's privacy program. This position reviews, tracks, coordinates, and documents privacy-sensitive requests and incidents involving: Medicaid applicants, recipients, and beneficiariesClaims, eligibility, and enrollment informationProvider and program integrity dataProtected Health Information (PHI)Personally Identifiable Information (PII) Key Responsibilities Privacy Request ManagementResponsible for processing and reviewing:Individual access requestsInformation-gathering requestsRecipient-directed disclosuresHIPAA authorizationsSubpoenas and court/legal requestsPrivacy complaintsPrivacy incident reportsBreach reporting activitiesPrivacy Compliance & Risk AssessmentApply HIPAA Privacy and Breach Notification requirements.Ensure compliance with Medicaid confidentiality requirements and applicable regulations.Review requests and incidents for privacy risks and compliance concerns.Verify identity and authority while adhering to minimum necessary standards.Follow established escalation procedures and privacy best practices.Conduct remote and onsite privacy assessments to verify compliance. Program Support & Audit Participation Assist in the development, implementation, maintenance, and documentation of the Agency's privacy program, including participation in federal and state audits conducted by organizations such as:Social Security Administration (SSA)Internal Revenue Service (IRS)U.S. Department of Health & Human Services (HHS)Centers for Medicare & Medicaid Services (CMS)Office for Civil Rights (OCR)State Examiner's BoardOther regulatory and oversight agencies Required Knowledge Working knowledge of HIPAA Privacy Rule and Breach Notification requirements.Working knowledge of Medicaid confidentiality requirements, particularly 42 CFR Part 431, Subpart F.Understanding of 42 CFR Part 2 considerations and related privacy requirements. Required Skills Ability to review and evaluate:SubpoenasCourt ordersHIPAA authorizationsAccess requestsPrivacy incident reports