Privacy Analyst

Health Care Service Corporation•Chicago, IL

6d•$45,900 - $102,100•Hybrid

About The Position

At HCSC, our employees are the cornerstone of our business and the foundation to our success. We empower employees with curated development plans that foster growth and promote rewarding, fulfilling careers. Join HCSC and be part of a purpose-driven company that will invest in your professional development. BASIC FUNCTION HCSC is looking for a dynamic Privacy Analyst to join its Richardson TX or Chicago IL office! This role is responsible for supporting the organization's privacy program by ensuring compliance with HIPAA, HITECH, state privacy regulations, and organizational policies related to protected health information (PHI). Will be responsible for actively supporting and coordinating HCSC Privacy Office operations, and initiatives; including gathering privacy risk and privacy compliance data; developing, updating, and maintaining privacy office documentation, procedures, and standards; developing and analyzing regular and ad-hoc reports; drafting responses to key stakeholders, auditors, and regulators; triaging privacy compliance requests; performing Privacy Office database management including disseminating information from various sources and systems and project management support This position supports and coordinates operational activities and initiatives and resolve issues by working with staff and leadership within the department and across other departments supported by the Divisional Privacy Officer (DPO) model. Responsible for supporting, coordinating, and distributing regulatory information via intranet and internet website(s), tracking and reporting on a variety of regulatory required initiatives under federal and state laws and compliance with corporate policies and procedures. NOTE: this role is HYBRID/FLEX and requires in-office visibility three days per week, working from home the other two days. Relocation is NOT available; sponsorship will NOT be extended either now or in the future.

Requirements

Bachelor’s Degree (preferably in in Healthcare Administration, Health Information Management, Business Administration, Compliance) OR 4 years direct of work experience in healthcare privacy, compliance, health information management, auditing, or related areas.
Knowledge of the health care industry.
Decision-making skills and analytical abilities.
Excellent verbal and written communication skills; listening skills; and organizational skills.
Ability to work with peers and resolve issues or complete projects/initiatives.
Strong analytical and problem resolution skills.
Ability to work with highly sensitive and confidential information and manage multiple priorities while maintaining confidentiality.
PC proficiency to include MS Office applications (i.e. Word, Excel, PowerPoint, Workday, Co-Pilot) and healthcare technology systems.

Nice To Haves

Strong HCSC organizational knowledge.
Working knowledge of HIPAA Privacy Rule, HIPAA Security Rule, HITECH, and healthcare privacy regulations.
Experience performing privacy assessments and documenting findings.
Certified in Healthcare Privacy and Security (CHPS), Certified Information Privacy Professional (CIPP/US), Certified in Healthcare Compliance (CHC), or similar certification.
Knowledge of privacy monitoring tools, access management, and audit reporting systems (i.e. Tableau, Power BI, ERP).

Responsibilities

Manages various responsibilities within the HCSC Privacy Office, supporting low and moderate risk issues and departments, as appropriate, to ensure HCSC compliance with various federal and state regulations.
Supports senior level Privacy Office workers and other HCSC departments regarding policies, procedures, and process flows on an annual and ad hoc basis (or obtaining certifications from managers that processes are current).
Coordinates, validates, and supports monthly, quarterly, and annual reports regarding core Privacy Office functions.
Supports Privacy Office policies and procedures updates, ensuring the appropriate training information/notification, preemption information and complaint information for employees are up-to-date and accurate.
Facilitates any changes in departmental policies/procedures as a result of internal audit/compliance activities.
Support tracking and triaging of all complaints received, notifying senior level Privacy Office workers of upcoming response deadlines.
Supports the monitoring of HCSC disclosures, analyzing and identifying any low to moderate risk practices for solutioning with senior level Privacy Office workers.
Supports, facilitates, and coordinates Privacy Risk Assessment completion and analyzes risk based upon HIPAA required criteria and/or other breach analysis requirements; performs thorough analysis helping determine appropriate response under HIPAA.
Reviews Privacy related contracts and supports low to moderate complexity contract redlining.
Analyzes and categorizes Privacy risks identified by senior level Privacy Office workers to determine appropriate corrective actions.
Produces reports on regular basis for senior level Privacy Office workers regarding incident types, volumes, areas involved, etc. and actively monitors and tracks issues through resolution.
Responsible for gathering privacy case, incident, contract, privacy risk, and privacy compliance data from multiple sources and systems and reviewing standard reports for accuracy and preparing non-standard reports. Standard and non-standard report preparation may require additional analysis.
Support and assist senior level Privacy Office workers with ongoing or new privacy related projects or initiatives.
Complete HIPAA compliant responses and notices to state and federal regulators for senior level Privacy Office workers.
Actively supports and cooperates fully with the Office of Civil Rights, other legal entities and HCSC officers in any Privacy compliance reviews or investigations.
Maintain complete confidentiality of company business.