Privacy Analyst

Ensemble Health Partners • Work at Home - Ohio - Other, OH

4d • $63,100 - $94,650 • Remote

About The Position

Ensemble Health Partners is seeking a Privacy Analyst to support privacy operations, incident review, compliance monitoring, and program administration in a complex healthcare environment. The role includes reviewing privacy incidents, maintaining documentation, supporting privacy risk analyses, and contributing to policy and training updates. It offers exposure to HIPAA, healthcare operations, data governance, and the practical application of privacy requirements in a technology-enabled business setting.

The position is suited to an intellectually curious, analytical person who is comfortable with technology and interested in learning new systems, working with data, understanding digital tools, and exploring responsible uses of AI-enabled solutions. This is a remote position, with required willingness and ability to travel to and work onsite at client, temporary, or corporate office locations as business needs require. Candidates must reside and be authorized to work in the United States.

The role supports the protection of sensitive information and responsible innovation while improving the systems and workflows of a complex healthcare business. It provides hands-on experience across privacy, healthcare, data risk, digital operations, AI, and automation, with potential career development in senior privacy, compliance, governance, data risk, or responsible AI roles.

Requirements

• Bachelor’s degree or an equivalent combination of education and relevant experience.
• 2–4 years of professional experience in privacy, compliance, healthcare operations, information governance, information security, risk, or a related analytical, operations, or technology-focused role.
• Working knowledge of privacy principles, data-handling expectations, and risk awareness in regulated or data-intensive environments.
• Ability to produce clear, organized written documentation, such as case notes, issue summaries, policy drafts, reports, or research findings.
• Strong written and verbal communication skills, including the ability to explain technical or regulatory topics to non-technical audiences.
• Sound judgment, discretion, and ability to handle sensitive information.
• Interest in professional development and willingness to pursue a privacy certification such as CIPP/US, CIPM, CHPC, or a related credential.
• Willingness and ability to travel to and work onsite at client, temporary, or corporate office locations as business needs require.
• Must reside and be authorized to work within the United States.

Nice To Haves

• Experience with HIPAA Privacy compliance in a hospital, health system, or other regulated healthcare setting.
• Experience supporting healthcare compliance, privacy investigations, audits, security, data governance, or other work requiring critical thinking and organization.
• Digital fluency and comfort with modern workplace tools, case-management systems, spreadsheets, dashboards, or data analysis tools.
• Curiosity about emerging technology and interest in responsible uses of AI, automation, and data-driven tools in healthcare and business operations.
• Experience reviewing operational workflows, business processes, or data practices to identify risks and recommend practical next steps.
• Relevant certifications, coursework, internships, or project work in privacy, cybersecurity, data governance, analytics, health informatics, or responsible AI.
• Inquisitiveness and openness to innovation, including AI, to explore better processes and reduce friction while improving patient and client experiences.

Responsibilities

• Support investigations of suspected privacy incidents and breaches involving protected health information and other sensitive data under senior team members’ direction.
• Gather facts, review records, and coordinate with business partners to help determine incident scope, root cause, and follow-up actions.
• Assist with incident documentation, client support materials, and internal communications, with senior review for complex matters.
• Maintain investigation records, evidence, and the privacy incident log in accordance with retention requirements.
• Identify incident patterns and recurring issues, including those involving new technologies or process gaps, and escalate trends.
• Support daily privacy operations, including privacy reviews, documentation, issue tracking, and follow-up activities.
• Assist with privacy risk analyses involving sensitive data, business processes, and new or changing technologies.
• Review data flows, system use cases, and operational activities to identify privacy risks and escalation needs.
• Maintain privacy logs, intake records, issue trackers, and program documentation accurately and in an organized manner.
• Contribute to reviews of digital tools, workflow automation, analytics platforms, and AI-enabled solutions so privacy requirements are considered early in design and implementation.
• Monitor regulatory, industry, and technology developments and summarize practical implications for the privacy team.
• Improve templates, workflows, trackers, and checklists used in privacy operations and governance.
• Contribute to privacy policies, standards, training materials, and internal guidance documents.
• Support privacy risk assessments, audits, monitoring activities, and regulatory response preparation.
• Track metrics and help prepare reports, dashboards, and status updates that provide useful insights to leaders and business partners.

Benefits

• Bonus incentives and quarterly and annual incentive programs.
• Paid professional certifications; associates earn a certification relevant to their field.
• Tuition reimbursement.
• Comprehensive benefits, including healthcare, time off, retirement, and well-being programs.
• Career advancement and professional development.
• Collaborative, growth-oriented, and innovative culture.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level