Senior Privacy Analyst

GTT•Montgomery, AL

4d•Onsite

About The Position

The Senior Privacy Analyst supports the Agency Privacy Officer in the day-to-day operation of the Agency’s privacy program. The role reviews, tracks, coordinates, and documents privacy-sensitive requests and incidents involving Medicaid applicants, recipients, and beneficiaries; claims, eligibility, and enrollment information; provider and program integrity data; protected health information (PHI); and personally identifiable information (PII). The analyst processes and reviews individual access requests, information-gathering requests, recipient-directed disclosures, HIPAA authorizations, subpoenas and legal requests, privacy complaints, privacy incidents, and breach reporting activities. The position applies HIPAA Privacy and Breach Notification requirements and Medicaid confidentiality requirements, reviews requests and incidents for privacy risks and compliance concerns, verifies identity and authority while following minimum necessary standards, and conducts remote and onsite privacy assessments. The analyst also supports the development, implementation, maintenance, and documentation of the Agency privacy program and participates in audits by oversight agencies. This is a 12-month onsite contract in Montgomery, Alabama. A background check and drug test are required. Expense reimbursements are not approved. Applicants must be authorized to work for any U.S. employer; visa sponsorship or transfer is unavailable. Interviews may be by video or in person depending on location. Submission documents required are a resume, RTR, and cover letter.

Requirements

Working knowledge of the HIPAA Privacy Rule and Breach Notification requirements.
Knowledge of Medicaid confidentiality requirements, including 42 CFR Part 431, Subpart F.
Understanding of 42 CFR Part 2 considerations.
Experience reviewing subpoenas, court orders, HIPAA authorizations, access requests, and privacy incident reports.
Strong analytical, documentation, compliance, and problem-solving skills.
Applicants must be authorized to work for any employer in the U.S.; the employer cannot sponsor or take over sponsorship of an employment visa.
Background check and drug test required.
Resume, RTR, and cover letter required for submission.

Responsibilities

Process and review individual access requests, information-gathering requests, recipient-directed disclosures, HIPAA authorizations, subpoenas and legal requests, privacy complaints, privacy incidents, and breach reporting activities.
Apply HIPAA Privacy and Breach Notification requirements.
Ensure compliance with Medicaid confidentiality requirements and regulations.
Review requests and incidents for privacy risks and compliance concerns.
Verify identity and authority while adhering to minimum necessary standards.
Conduct remote and onsite privacy assessments and follow escalation procedures.
Assist with development, implementation, maintenance, and documentation of the Agency privacy program.
Participate in audits conducted by SSA, IRS, HHS, CMS, OCR, the State Examiner's Board, and other oversight agencies.