Privacy Analyst

Company :

Highmark Health

This job provides analytical support to various aspects of the enterprise-wide Privacy Program. Responsible for the development of policies and procedures, privacy incident investigation, and response maintenance of privacy incident databases and workforce training. Provides guidance to business and operational areas and recommends changes to processes to support privacy program compliance. Additional responsibilities may include receiving, reviewing, and responding to patient and member requests for Health Insurance Portability and Accountability Act of 1996 (HIPAA) individual rights as well as monitoring, auditing, and oversight activities .

This is a hybrid based role in Pittsburgh, Camp Hill, Buffalo NY, Kansas City or Delaware - You are required to be onsite 3 days a week - T, W, Th.

• Enterprise-wide Privacy Program facilitation and implementation.
• Collaborate with business owners, and other stakeholders to identify and develop, implement and enhance privacy policies, procedures and programs to meet or exceed the privacy compliance requirements of laws and regulations including but not limited to:
  The Health Insurance Portability and Accountability Act of 1996 (HIPAA), The Health Information Technology for Economic and Clinical Health Act (HITECH), and other international, federal, and state laws, rules, and regulations.
• Review Analyze privacy incidents, new initiatives and process changes for compliance with international, federal, and state privacy and security laws, rules, and regulations.
• Provide analytical support to risk identification and stratification, which includes monitoring and preparing reports in a proactive fashion.
• Lead investigations of privacy and security incidents to determine facts, identify root cause, and thoroughly analyze scope of impact to provide comprehensive analysis with recommendations for resolution and risk mitigation.
• Ensure privacy investigations are accurately documented and tasks are completed within required compliance time frames and departmental standards.
• Assist with required HIPAA risk analysis and execution of any required notice to accounts and individuals.
• Monitor current privacy compliance environment, including corporate policies and procedures and other rules and regulations for privacy compliance through trend analysis and risk assessment, taking appropriate steps to improve the program’s effectiveness.
• Perform privacy risk assessments and support implementation of new or amended requirements.
• Privacy refresher training development, implementation, and delivery as the result of identified corrective actions as part of privacy investigations.
• Business owner collaboration and communication. Establish and maintain relationships with business owners in a variety of departments and subsidiaries within Highmark Health. Work closely with business owners throughout the enterprise to collaborate on key privacy and information management initiatives such as training, communication, and risk management.
• Participate in audits and cross-functional projects of various sizes and levels of complexity; serves as privacy subject matter expert throughout such projects.
• Provide technical, administrative, and analytical privacy assistance as required.
• Demonstrate and apply a thorough understanding of Highmark Health’s complex business processes and environment.
• Demonstrate and apply strong project management skills, inspire teamwork and responsibility with team members, and use current technology and tools to enhance the effectiveness of deliverables.
• Other duties as assigned or requested.

• Associate's Degree

• Relevant experience and/or education as determined by the company in lieu of an Associate's Degree

• Bachelor's Degree or J.D.

• None

• None

• 3 years of relevant, progressive experience in the area of specialization. Exempted experience requirements effective August 2016

• None

• In depth knowledge of privacy laws and regulations including HIPAA, privacy and security breach notification rules and reporting…