Privacy Analyst

Position Summary:

Under the direction of the Director of Corporate Privacy/Privacy Officer, the Privacy Analyst supports Virtua Health’s privacy program, including system-wide compliance with the Health Insurance Portability and Accountability Act’s (HIPAA) Privacy Rule and other privacy-related state and federal regulations.

Position Responsibilities

In conjunction with the Privacy Manager, assumes responsibility for the initial screening of, timely investigation, and triaging, as appropriate, of system-wide privacy matters. Conducts thorough and comprehensive investigations of privacy violation allegations, including data gathering, analyses, interviews, and report writing under the direction of the Director of Corporate Privacy.

Provides support to the Director of Corporate Privacy/Privacy Officer and Privacy Manager in meeting federal and state reporting requirements, including the Office for Civil Rights, regarding breach notification and follow-up investigations.

Coordinates with Legal, Human Resources, IT Security, Marketing, Security, Health Information Management, and other departments, as needed, during the privacy investigation and breach notification processes.

Continuously improves the methodology(ies), policies, and procedures to maintain appropriate documentation for all privacy investigation activities, including a detailed log of all allegations, information related to affected parties, investigation details, and breach risk assessments.

Conducts monitoring audits and investigations with respect to electronic health record access. Follows-up and resolves any identified issues. Maintains associated documentation.

Serves as a confidential point of contact for employees to report privacy violations.

Assists the Director of Corporate Privacy/Privacy Officer and Privacy Manager in conducting system-wide privacy risk assessments.

In conjunction with the Director of Corporate Privacy/Privacy Officer and Privacy Manager, trains and educates employees on Virtua’s privacy program and related policies and procedures.

Position Qualifications Required:

• Minimum of 3 years of experience in the healthcare industry, including conducting investigations and trainings.
• Knowledge of HIPAA/HITECH, including breach notification protocol.
• Strong time-management and multi-tasking skills.
• Strong interpersonal and communication skills.
• Ability to work with all levels of management across all functional areas.
• Proficient in Word, Excel, PowerPoint, Outlook. Experience with Epic is a plus. 

Required Education:

Bachelor’s Degree required