Senior Privacy Analyst

Baylor Genetics•,

About The Position

This role will support the Company’s privacy and data protection program by working with members of the Compliance department and other cross-functional teams to implement, maintain and oversee privacy-related compliance efforts. The person in this role supports the Sr. Manager, Data Privacy and is responsible for actively supporting and coordinating privacy operations and initiatives, including conducting privacy incident investigations, analyzing reports, performing database management, including disseminating information from various sources and systems. This position supports and coordinates operational activities and initiatives, resolving issues by working with staff across departments. This role may evolve as organizational needs change. This role provides critical and necessary support to assist the Sr. Manager, Data Privacy, to meet U.S. and global privacy requirements. This role impacts all operations of the organization.

Requirements

Bachelor’s degree in Healthcare Administration, Business Administration, Public Health, Computer Science, or a related field.
2-4 years of experience in healthcare privacy compliance.
Demonstrated knowledge and understanding of all federal, state and international laws affecting the management of protected health information (PHI) and personally identifiable information (PII).
Excellent written communication skills, with the ability to draft clear, well-structured assessments, reports, and policies.
Strong verbal communication skills, capable of explaining privacy risks and requirements to technical and non-technical audiences.
Analytical mindset with attention to detail and sound judgment in risk evaluation.
Ability to work independently while collaborating effectively across teams.

Nice To Haves

Certified in Healthcare Privacy Compliance (CHPC) or Certified Information Privacy Professional (CIPP/US).
Experience navigating incident management workflows and EMR auditing tools.
Experience assessing or reviewing applicable AI laws and regulations, including state-level AI disclosure requirements

Responsibilities

Performs advanced (senior level) privacy analysis work.
Conduct privacy impact assessments (PIAs), data protection impact assessments (DPIAs), and related risk assessments to evaluate the collection, use, storage, and sharing of personally identifiable data.
Assist with responding to Data Subject Request and other related privacy requests.
Identify and analyze privacy risks associated with new and existing products, technologies, and business processes, and recommend mitigation strategies.
Investigate, document and track routine privacy incidents in a thorough and timely manner, tracking and reporting trends.
Respond timely to, track, and document privacy inquiries, seeking guidance as necessary from the Sr. Manager, Data Privacy.
Assists with the development and implementation of the privacy program and privacy policies as necessary to build and maintain an effective privacy program.
Collaborate with cross-functional teams to support privacy-by-design principles and ensure privacy requirements are integrated into projects early.
Conducts routine and targeted audits of electronic medical records and other electronic systems, to identify and report inappropriate uses and disclosures of sensitive data.
Assist in preparing comprehensive responses to privacy and security surveys and questionnaires required by other program areas.
Perform other duties as assigned to support team and organizational objectives.
Comply with all company policies, procedures, and applicable regulatory requirements.