Privacy Program Analyst

About the role

The Privacy Program Analyst will support the Countywide Privacy Program and data protection initiatives, focusing on the County's access to and use of Personally Identifiable Information (PII) within the organization.

Responsibilities

• Perform assigned privacy compliance auditing and monitoring functions
• Afford assistance with the development and enhancement of privacy policies and procedures
• Perform tasks associated with Privacy Impact Assessments and third-party vendor privacy risk assessments
• Participate in the review and update of Privacy Awareness training and educational activities
• Conduct tasks associated with the investigation of privacy incidents, breach notification actions, and/or privacy policy violations

Requirements

• Knowledge and experience in customer service
• Decision making
• Flexibility
• Interpersonal skills
• Organizational awareness
• Written and oral communication
• Planning and evaluating
• Analysis and risk management
• Independence
• Proficient in Microsoft Office and Adobe Acrobat software

Additional Skills Required

• Ability to analyze and map PHI/PII data flows, intake points, and operational workflows
• Strong understanding of technical safeguards including MFA, encryption, logging, least-privilege access, and workstation security fundamentals
• Ability to interpret system access control lists, audit logs, and basic security configurations
• Skilled in developing SOPs, operational checklists, and implementation tools to translate policies into actionable workflows
• Knowledge of HIPAA governance structures, escalation frameworks, and privacy decision-making workflows
• Ability to support vendor due-diligence processes, including review of SOC 2 reports, data-protection documentation, and BAA requirements
• Strong communication and training-development skills (creating modules, job aids, and scenario-based learning materials)
• Project management skills, including tracking milestones, managing dependencies, and supporting large multi-phase compliance projects
• Proficiency in privacy audit methods, monitoring dashboards, and continuous-improvement tracking
• Ability to work cross-functionally with IT, HR, Contracts, Legal, Operations, and Executive leadership
• Experience conducting full PHI/PII workflow mapping across multiple divisions or departments
• Experience supporting technical safeguard implementation projects (e.g., access controls, endpoint protections, encryption, system logging)
• Experience contributing to or supporting a HIPAA or privacy governance committee, including drafting charters and escalation procedures
• Experience converting policy requirements into operational procedures, staff instructions, and role-based workflows
• Experience conducting hands-on breach investigation including HIPAA and governing breach notification requirements
• Experience conducting vendor privacy/security risk assessments, including reviewing cybersecurity certifications and contracting documents
• Experience developing or maintaining workforce privacy/HIPAA training programs
• Experience supporting or coordinating large-scale compliance implementations or operational transformation initiatives
• Experience conducting internal privacy audits, monitoring activities, or designing metrics for compliance tracking

Qualifications

• Minimum of two (2) years of experience with a focus on privacy program functions, including: privacy policies and procedures development, privacy governance, performance of PIAs, third-party vendor risk assessments, incident response investigations and breach notification laws/ regulations, privacy compliance audits, and programmatic and operational privacy experience
• Two (2) years of experience conducting full PHI/PII workflow mapping across multiple divisions or departments
• Two (2) years of experience supporting technical safeguard implementation projects (e.g., access controls, endpoint protections, encryption, system logging)
• One (1) year of experience contributing to or supporting a HIPAA or privacy governance committee, including drafting charters and escalation procedures
• Two (2) years of experience converting policy requirements into operational procedures, staff instructions, and role-based workflows
• Two (2) years of experience conducting hands-on breach investigation including HIPAA and governing breach notification requirements
• Two (2) years of experience conducting vendor privacy/security risk assessments, including reviewing cybersecurity certifications and contracting documents
• Two (2) years of experience developing or maintaining workforce privacy/HIPAA training programs
• Two (2) years of experience supporting or coordinating large-scale compliance implementations or operational transformation initiatives
• Two (2) years of experience conducting internal privacy audits, monitoring activities, or designing metrics for compliance tracking

Skills

• Customer service
• Decision making
• Flexibility
• Interpersonal skills
• Organizational awareness
• Written and oral communication
• Planning and evaluating
• Analysis and risk management
• Independence
• Microsoft Office
• Adobe Acrobat

Benefits

• Health Insurance: Medical, dental, and vision coverage
• Retail Plans: Participation in a company-sponsored retirement savings plan
• Legal Service Plans: Offering access to attorneys for legal advice and representation