Privacy Analyst Associate, Regulatory; Hybrid- Pittsburgh, PA

Privacy Analyst Associate, Regulatory

UPMC Health Plan has an exciting opportunity for a Privacy Analyst Associate, Regulatory position in the Privacy department. This is a full time position working Monday through Friday daylight hours. This will be a hybrid role consisting of working at home and in office 3 days per week which is located in Pittsburgh, PA.

Under the direction of the Director, Privacy Policy and Regulatory Compliance, the Privacy Analyst Associate Regulatory is primarily responsible for supporting the organizational oversight activities of UPMC Health Plan. This position will have a vital role in ensuring that data is protected and shared in compliance with legal requirements and internal best practices; collaborating on review of outbound communications across the insurance services division;

and create timely, internal communications regarding new regulation and best practices.

Responsibilities:

• Serve as primary support for UPMC Health Plan.
• Support issuance of guidance and support throughout the organization.
• Maintain ownership of intake, review and administration of authorizations required for data sharing
• Support the intake, review and administration of Business Associate Agreement contracts.
• Manage and monitors Privacy Office shared mailbox to resolve or delegate requests as appropriate.
• Support to the establishment and maintenance of departmental and system-wide policies, procedures and tools to support compliance activities.
• Partner with all lines of business to foster consistency, collaboration and compliance with privacy requirements and best practices.
• Support the planning, developing and presenting educational and training materials related to specific compliance topics, including annual mandatory training modules, to be utilized across the UPMC organization.
• Research state and federal regulatory and industry guidance, as well as internal data, for purposes of analysis and creation of organizational guidance.
• Assist leadership on special projects, as assigned.
• Contribute to ongoing departmental goals.
• Secondary support responsibilities may include:
  Assist with development of data needed to provide reports and updates to relevant business, functional and operational areas as well as senior management and/or the Board. Assist with privacy review activities as necessary.
• Help to enhance and maintain internal and external websites.
• Acquire an understanding of health care and industry terminology and risk.
• Assist in developing, maintaining and exhibiting departmental professionalism and reputation.
• Effectively communicate and support the values of UPMC to employees at all levels of the organization.

Bachelor's Degree required. Minimum of 1 year of health care, compliance or other related work experience is preferred. An Advanced Degree or Professional Certification in Privacy, Compliance, Health Care Administration, Business Administration, Law or a related field is preferred. Understanding of applicable privacy regulatory requirements (e.g. HIPAA, ARRA, HiTECH, Omnibus HIPAA Rule, CAN-SPAM, TCPA, etc.) is essential. Technical acumen and the ability to learn and identify best practices relating to new technology solutions are preferred.

Ability to work in a fast-paced environment is a must. Must have ability to manage multiple tasks and projects, and forge strong interpersonal relationships within the department, with other departments, and with external audiences. Attention to detail is critical to the success of this position, as is the ability to deal with ambiguity. Excellent planning, communication, documentation, organizational, analytical, and problem solving abilities are a must.

Licensure, Certifications, and Clearances: UPMC is an Equal Opportunity Employer/Disability/Veteran