HIPAA & Privacy Analyst

About the role

The role focuses on ensuring compliance with HIPAA regulations and related privacy laws within a healthcare environment, handling policy development, audits, training, and incident response.

Key responsibilities

• Develop and maintain policies, procedures, and protocols to ensure compliance with HIPAA regulations and other relevant privacy laws.
• Conduct regular audits and assessments to identify areas of non‑compliance or potential risks related to PHI.
• Implement corrective action plans to address findings from audits, working closely with relevant departments.
• Monitor changes in HIPAA regulations and industry best practices, updating policies and procedures accordingly.
• Oversee the process of obtaining patient consent and authorization for the use and disclosure of PHI.
• Collaborate with IT and security teams to ensure the security of electronic PHI (ePHI) and compliance with HIPAA Security Rule requirements.
• Coordinate and conduct HIPAA training sessions for staff, ensuring understanding of privacy policies and procedures.
• Respond to and investigate any breaches of PHI, documenting incidents and implementing corrective actions.
• Maintain accurate records of HIPAA compliance activities, audits, training sessions, and incident reports.

Required profile

• Bachelor's degree.
• Minimum 3‑5 years of experience in HIPAA compliance, preferably in US medical billing.
• Thorough knowledge of US HIPAA regulations, Privacy Rule, Security Rule, and Breach Notification Rule.
• Excellent English communication skills and ability to train staff on HIPAA requirements.
• Detail‑oriented mindset with ability to analyze policies for compliance gaps.
• Ability to work collaboratively with cross‑functional teams and maintain confidentiality.

Required skills

• Knowledge of HIPAA regulations and privacy laws.
• Familiarity with healthcare industry standards for safeguarding PHI, including ePHI.
• Understanding of compliance auditing processes, risk assessments, and corrective action planning.