Senior Privacy Analyst

Role Summary
A Senior Privacy Analyst is responsible for supporting the implementation and management of the privacy program within a government agency. This role involves reviewing, processing, and documenting privacy-sensitive requests and incidents related to Medicaid recipients, providers, and program integrity data. The Senior Privacy Analyst ensures compliance with federal and state privacy regulations while maintaining the confidentiality and security of Protected Health Information (PHI) and Personally Identifiable Information (PII). The position requires a detail-oriented approach and the ability to coordinate with various oversight agencies.

Responsibilities

• Review and process individual access requests, disclosures, HIPAA authorizations, subpoenas, legal requests, privacy complaints, incidents, and breach reports.
• Apply HIPAA Privacy and Breach Notification requirements accurately and effectively.
• Ensure compliance with Medicaid confidentiality standards and state regulations, including 42 CFR Part 431, Subpart F.
• Conduct privacy risk assessments for requests and incidents, verifying identity and authority while adhering to minimum necessary standards.
• Document, track, and coordinate privacy-sensitive requests and incidents, maintaining comprehensive records.
• Assist with development, implementation, maintenance, and documentation of the agency’s privacy program.
• Participate in audits conducted by oversight agencies such as SSA, IRS, HHS, CMS, OCR, and state agencies.
• Conduct remote and onsite privacy assessments and escalate issues as necessary.
• Collaborate with cross-functional teams to improve privacy processes and compliance measures.
• Stay current with relevant privacy regulations and best practices to inform agency policies and procedures.

Qualifications

• Proven knowledge of HIPAA Privacy Rule, Breach Notification requirements, and Medicaid confidentiality standards.
• Experience reviewing subpoenas, court orders, HIPAA authorizations, access requests, and incident reports.
• Strong understanding of 42 CFR Part 2 considerations and standards related to PHI and PII security.
• Excellent analytical, documentation, compliance, and problem-solving skills.
• Ability to verify identity and authority in sensitive privacy scenarios.
• Experience conducting privacy assessments, audits, and compliance reviews.
• Prior work in sensitive healthcare or government agency environments preferred.
• Strong communication skills and attention to detail.
• Ability to work independently and as part of a team.
• Availability for onsite work at the designated location.
• This position requires eligibility for a U.S. Government security clearance. In accordance with federal law, U.S. citizenship is required.

Publishing Pay Range: $50.00 – $60.00 Hourly

Location Requirements: On-Site