HIPAA Privacy/Security Privacy Analyst

NTT DATA Services•Little Rock, AR

1d•$81,936 - $122,904•Onsite

About The Position

The Privacy Analyst, working closely with the Privacy Team and client, will be a key contributor in providing privacy services to the DHS Privacy Office. These services include: evaluating the effectiveness of privacy programs, assessing risks, and vulnerabilities, identifying control gaps, reviewing reports for consistency and accuracy, managing remediation efforts. The candidate may also conduct independent privacy assessments or contribute to privacy independent verification and validation (IV&V) activities. Local candidates only, as this position is on client site from Little Rock, Arkansas.

Requirements

Minimum six years combined experience working with: Applying HIPAA Privacy/Security requirements and handling PHI in a healthcare or human-services setting
Records release/disclosure or health information management (HIM) operations.
Investigative or operational writing - root-cause analysis, corrective action plans, investigation summaries, or some type of analytical writing
HIPAA Privacy and Security Rules
Undergraduate degree or 6 years relavent experience
Reside or relocate themselves to the Little Rock, AR or central AR area

Nice To Haves

Privacy/security incident handling or investigations
Hold one or more privacy certifications such as IAPP, CHPC, CIPP, and/or CISA
Experience working with State DHS Privacy and/or Security
Comprehensive understanding of security and privacy controls
Exceptional analytical, communication, and collaboration skills
Thorough understanding of HIPAA and NIST frameworks
Ability to understand and translate technical jargon
Advanced client and vendor relationship management

Responsibilities

Analysis and comprehension of client’s overall privacy program and posture
Lead the privacy incident and breach investigation program through intake, triage, four-factor risk assessment, investigation, and documentation; integrate privacy complaint intake into the same workflow
Prepare assessments and case workups for the Privacy Officer to review for breach determination and assist with the breach notification process (individual notice, OCR portal, etc.).
Translate findings from privacy investigations and audits into corrective and preventive actions that address root cause
Develop and deploy privacy/security training and awareness with an emphasis on role-based training and targeted actions that address findings.
Produce recurring trend and program metrics
Identifying and documenting detailed remediation recommendations
Understanding relevant laws and regulations for security and privacy requirement
Assist on policy reviews under direction of the Privacy Officer
Review documents, contracts and agreements to ensure compliance with regulatory requirement
Participating in assessments
Conduct independent research on behalf of the Privacy Officer
Help record and track subpoena requests
Research requests for changes in records for billing, SNAP, etc.
Assist completing audits (IRS, SS, FBI, FOIA, etc.)
Prepare reports for DHS C level leadership
Review policy to assist DHS in identifying and implementing privacy best practices
Perform data cleaning analysis to identify data quality approach
Determine appropriate data to analyze and prepare required report
IT governance, risk, compliance (GRC), and privacy data analysis