Analyst, Privacy & Compliance
About The Position
The Compliance & Privacy Analyst conducts assigned privacy and compliance investigations, audits, and related follow-up activities across NYU Langone Health. The Analyst gathers and analyzes information, reviews records, conducts interviews, maintains investigation documentation, supports risk assessments and breach-notification activities, and develops targeted education based on identified compliance and privacy risks. The role works with Senior Analysts, Managers, and the Senior Director in the Office of Internal Audit, Compliance, and Enterprise Risk Management (IACERM) to prepare internal reports and respond to external inquiries. Complex, sensitive, cross-functional, or high-risk matters are escalated to Senior Analysts and Compliance Office leadership. The Analyst also supports proactive audits of electronic health record access, performs Privacy Rounds at NYU Langone Health locations, monitors Data Loss Prevention software, and assists with corrective actions and applicable federal and state reporting requirements. The position delivers education on HIPAA, privacy, and related compliance topics and serves as a confidential contact for employees seeking guidance or reporting potential compliance violations. The Analyst is expected to maintain current working knowledge of applicable privacy, compliance, and breach-notification laws, regulations, guidance, and organizational policies.
Requirements
- Bachelor’s degree required.
- Knowledge of HIPAA, HITECH, and general healthcare compliance and privacy laws and regulations.
- 1–3 years of experience in the healthcare industry, including conducting investigations and trainings.
- Demonstrated excellence in investigation and auditing.
- Time management and multitasking skills.
- Strong interpersonal and communication skills, with the ability to work with all levels of management across functional areas.
- Ability to effectively communicate with all levels of the organization.
Nice To Haves
- Health Care Compliance or Privacy Certification.
- Legal background or training.
- Excellent writing and analytical skills.
Responsibilities
- Conduct timely investigations of assigned routine to moderately complex Compliance and HIPAA concerns, including information gathering, record review, analysis, interviews, and preparation of documentation and reports; promptly escalate complex, sensitive, high-risk, or cross-functional matters.
- Support Senior Analysts and Compliance Office leadership on complex or escalated investigations through research, fact-finding, evidence organization, interview coordination, follow-up, case documentation, and report preparation.
- Maintain complete, accurate, and confidential investigation documentation, including allegation logs, affected-party information, investigation records, risk-assessment materials, correspondence, and closure documentation.
- Coordinate with the Office of General Counsel, Human Resources, IT Security, Communications & Public Affairs, Security, Finance, and other stakeholders during investigations, remediation, and notification processes.
- Assist with recommending and implementing corrective actions resulting from investigations, audits, and other identified compliance or privacy concerns.
- Support proactive audits of electronic health record access, including information gathering, follow-up, documentation, and escalation of potential concerns.
- Perform Privacy Rounds at NYU Langone Health locations to assess compliance, identify education opportunities, and provide staff education as appropriate.
- Analyze issues identified through investigations, proactive audits, Data Loss Prevention monitoring, and guidance inquiries to identify recurring trends and facilitate targeted training and education; escalate issues as needed.
- Monitor Data Loss Prevention software, review and follow up on identified issues, maintain related documentation, and issue monthly educational reminders as appropriate.
- Support team leadership in meeting applicable federal and state reporting requirements, including Office for Civil Rights breach-notification reporting and related follow-up investigations.
- Develop and deliver targeted training and education on HIPAA, privacy, and related compliance topics as needed.
- Serve as a confidential point of contact for employees seeking guidance, communicating concerns to management, or reporting potential compliance violations.
- Maintain and apply current working knowledge of applicable federal, state, and local healthcare privacy, compliance, and breach-notification laws, regulations, guidance, and organizational policies, including HIPAA and HITECH.
- Perform and participate in other duties as required.
Benefits
- Comprehensive benefits and wellness package.
- Financial security benefits.
- Generous time-off program.
- Employee resource groups for peer support.
- Holistic employee wellness program covering physical, mental, nutritional, sleep, social, financial, and preventive care.
- Resources and services intended to support employees and their families.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Entry Level
