Note: The job is a remote job and is open to candidates in USA. Mercy Health’s Privacy Analyst investigates potential privacy breaches and noncompliance with privacy policies. The role administers privacy procedures, supports compliance with HIPAA, HITECH, and state privacy requirements, and manages investigations, breach reporting, audits, and corrective actions.
Responsibilities
- Investigates, documents, and reports on issues related to privacy and confidentiality of Protected Health Information (PHI) under HIPAA (Health Insurance Portability and Accountability Act of 1996)
- Reports breaches to the DHHS Office for Civil Rights (OCR) in compliance with governing federal laws and prepares breach notification letters per the requirements of BSMH policies
- Requests data and/or access audits of electronic systems and incorporates audit finding results into investigations
- Creates and maintains electronic documentation for privacy incident investigations, resolutions, and corrective actions/sanctions
- Meets regularly with and keeps Director, Privacy apprised of the status of all investigations and projects
- Ensures corrective action plans addressing HIPAA are implemented and functional
- Maintains confidentiality of investigations
- Travel, if required by the Director, Privacy and approved by the VP, Compliance and Privacy, to complete on-site education and investigations
Skills
- 4-6 years' experience working with HIPAA and HITECH privacy rules or related compliance areas
- Strong knowledge of Privacy, Security, and Breach Notification Laws
- Advanced skill in Conducting, documenting, and reporting privacy incidents and breaches
- Drafting and issuing breach notification letters per regulatory requirements
- Strong skills with Incident Management Systems (e.g., Symplr, SafeCARE)
- Reporting breaches to the DHHS Office for Civil Rights (OCR) and other authorities
- Proficient in creating and maintaining electronic records for investigations and resolutions
- Proficient in Electronic Health Record (EHR) & Safet Event system proficiency (e.g., EPIC, SafeCARE)
- Proficient in Microsoft Office & CoPilot Proficiency
- Attention to Detail
- Maintaining strict privacy of sensitive information
- Clear Communication & Active Listening Skills
- Thriving in fast-paced, changing regulatory environments
- Collaboration with team and stakeholders
- Handling privacy complaints with empathy and professionalism
- Managing multiple investigations and deadlines efficiently
- Keeping records and projects well-structured
- Handling stressful situations and fluctuating workloads
- Integrity in everything
- Certified in Healthcare Privacy Compliance - Health Care Compliance Association
- Certified Information Privacy Manager - International Association of Privacy Professionals
- Bachelors, Business Administration, Health Care Management, Nursing, or Health Information Management
- Prior healthcare experience
- EPIC Electronic Health Record experience
Benefits
- Incentives
- Referral bonuses
- 403(b) with employer contributions (when eligible)
- Medical, dental, vision, and prescription coverage
- HSA/FSA options
- Life insurance
- Mental health resources and discounts
- Paid time off
- Parental and FMLA leave
- Short- and long-term disability
- Backup care for children and elders
- Tuition assistance
- Professional development and continuing education support
Company Overview
Company H1B Sponsorship