Analyst,Privacy & Compliance Job New York New York USA,Science

NYU Langone Health is a fully integrated health system that consistently achieves the best patient outcomes through a rigorous focus on quality that has resulted in some of the lowest mortality rates in the nation. For the fourth consecutive year, Vizient Inc. ranked NYU Langone No. 1 for quality care in the nation and U.S. News & World Report recently placed 12 of its clinical specialties among the top 10 in the nation.

NYU Langone offers a comprehensive range of medical services with one high standard of care across 6 inpatient locations, its Perlmutter Cancer Center, and over 320 outpatient locations in the New York area and Florida. With $14.2 billion in revenue this year, the system also includes two tuition-free medical schools, in Manhattan and on Long Island, and a vast research enterprise with over $1 billion in active awards from the National Institutes of Health.

Position Summary:

We have an exciting opportunity to join our team as a Analyst, Privacy & Compliance.

The Compliance & Privacy Analyst conducts assigned privacy and compliance investigations, audits, and related follow-up activities. The Analyst gathers and analyzes information, conducts interviews, maintains investigation documentation, supports risk assessments and breach-notification activities, and develops targeted education based on identified compliance and privacy risks. The Analyst collaborates with Senior Analysts, Managers, and the Senior Director in the Office of Internal Audit, Compliance, and Enterprise Risk Management (IACERM) to prepare internal reports and respond to external inquiries.

The Analyst identifies and escalates complex, sensitive, cross-functional, or high-risk matters to Senior Analysts and Compliance Office leadership.

Job Responsibilities:

Conducts timely investigations of assigned routine to moderately complex Compliance and HIPAA concerns across NYU Langone Health. Performs information gathering, record review, analysis, interviews, and preparation of investigation documentation and reports, as appropriate. Identifies and promptly escalates complex, sensitive, high-risk, or cross-functional matters in accordance with established procedures.

Supports Senior Analysts and Compliance Office leadership with complex or escalated investigations, as assigned, by conducting research and fact-finding, gathering and organizing evidence, coordinating interviews and follow-up activities, maintaining case documentation, and assisting with report preparation.

Maintains complete, accurate, and confidential documentation for assigned compliance and privacy investigations, including allegation logs, affected-party information, investigation records, risk-assessment materials, correspondence, and closure documentation.

Coordinates with the Office of General Counsel, Human Resources, IT Security, Communications & Public Affairs, Security, Finance, and other stakeholders, as appropriate, during assigned investigation, remediation, and notification processes.

Assists with the recommendation and implementation of corrective actions resulting from investigations, audits, and other identified compliance or privacy concerns.

Supports the Compliance and Privacy team in proactive audits of access to electronic health records, including information gathering, follow-up activities, documentation, and escalation of potential concerns to the Senior Analyst or Compliance Office leadership.

Performs Privacy Rounds at NYU Langone Health locations to assess compliance with privacy requirements, identify education opportunities, and provide staff education, as appropriate.

Analyzes issues identified through investigations, proactive audits, Data Loss Prevention monitoring, and guidance inquiries to identify recurring trends and facilitate targeted training and education opportunities. Escalates identified issues as needed.

Assumes primary responsibility for monitoring Data Loss Prevention software; reviews and follows up on identified issues; maintains related documentation; and issues monthly educational reminders, as appropriate.

Provides support to Compliance and Privacy team leadership in meeting applicable federal and state reporting requirements, including Office for Civil Rights breach-notification reporting and related follow-up investigations.

Develops and delivers targeted training and education to individuals and groups on HIPAA, privacy, and related compliance topics, as needed.

Serves as a confidential point of contact for employees to obtain…