Privacy Analyst

Job Description

The Privacy Program currently has an opportunity for a Privacy Analyst to support the Privacy Program mission at UChicago Medicine. This position will be primarily a work from home opportunity with the requirement to come onsite as needed. 

In this role, the Privacy Analyst, reporting to the Assistant Director, Privacy, supports the Privacy Program mission by receiving and responding to patient/employee inquiries, conducting and reporting on department reviews and audits, assisting with privacy and information security complaints and investigations, staying informed of current judicial trends related to HIPAA and other privacy and security compliance regulations, responding to hotline calls, delivering privacy related presentations/training, and creating guidance material, training, and other documents for workforce education initiatives.  

Essential Job Functions  

• Serve as first line support for questions, concerns, incidents, and complaints via in-person, telephone, hotline, e-mail and United States mail 

• Actions may include responding directly to the query, consulting with or interacting with other departments or coordinating with representatives or colleagues from other departments, forwarding the call to the appropriate Medical Center/BSD staff or to another department staff member or management 

• Enter activity data into logs and maintain documentation on the department shared drive 

• Based on types of questions/issues received, identify education/awareness opportunities and guidance topic material  

• Conduct, document, and follow up on department Privacy reviews/audits 

• Meet established service level standards for review/audit quantity and report generation turn-around time. Maintain the review data and reports 

• Seek opportunities to improve the department review program. Identify areas of service which are more susceptible to risks and work with the departments to identify the plan of action to minimize risk 

• Participate in the action plans as required 

• Assist in the development of training materials and presentations. 

• Present training as required 

• Assist in the development of answers to frequently asked questions 

• Provide materials to the knowledge repository consisting of training materials, frequently asked questions, policies, procedures, guidance documents, alerts, tips, and other knowledge-based deliverables of the Privacy Program 

• Identify and coordinate/manage materials to be posted on the Privacy Program website 

• Prepare reports and reporting metrics related to incidents, training, and other program-related areas 

• Collaborating with the Office of Clinical Research and IRB in relation to privacy-related research compliance regarding human subjects and clinical trial research 

• Stay abreast of current trends in privacy and information security compliance 

• Perform routine review of fact sheets, frequently asked questions and other resources published by the Office for Civil Rights and/or the Department of Health and Human Services 

• Maintain current knowledge of applicable federal, state, and international privacy and security laws and monitor advancements in information privacy technologies to ensure organizational adaptation and compliance  

Required Qualifications 

• Bachelor's degree  

• Minimum three (3) years of relevant (project management, HIPAA, information systems, or compliance) experience 

• Demonstrated familiarity with HIPAA Privacy and Security regulations with a focus on identifying risks and recommending corrective actions  

• Academic medical center and/or health care consulting experience  

• Experience in data mining, analysis, and report development  

• Demonstrated project management skills including determining project scope, creating and managing project plans, facilitating effective team meetings, and completing projects 

• Ability to think abstractly and concretely and attention to detail  

• Excellent analytical, written, verbal, presentation and interpersonal skills   

• Demonstrated capacity to work independently in an organized, detailed manner while maintaining a collaborative team environment 

• Strong computer skills including the ability to effectively use software applications such as Microsoft Word, Excel, Outlook, PowerPoint, Access and Internet Explorer  

Preferred Qualifications 

• Privacy and/or Compliance related certification (Certified Healthcare Compliance CHC and/or Certified Healthcare Privacy Compliance CHPC) desired or ability to obtain within one year (Certified Healthcare Compliance CHC and/or Certified Healthcare Privacy Compliance CHPC) 

• Additional background in privacy-related research administration   

Position Details 

• Job Type/FTE: Full-time 

• Shift: Day 

• Location: Hyde Park (Flexible)  

• Unit/Department: Privacy Program 

• CBA Code: Non-Union 

Why Join Us

We’ve been at the forefront of medicine since 1899. We provide superior healthcare with compassion, always mindful that each patient is a person, an individual. To accomplish this, we need employees with passion, talent and commitment… with patients and with each other. We’re in this together: working to advance medical innovation, serve the health needs of the community, and move our collective knowledge forward. If you’d like to add enriching human life to your profile, UChicago Medicine is for you. Here at the forefront, we’re doing work that really matters. Join us. Bring your passion.

UChicago Medicine is growing; discover how you can be a part of this pursuit of excellence at: UChicago Medicine Career Opportunities.

UChicago Medicine is an equal opportunity employer.  We evaluate qualified applicants without regard to race, color, ethnicity, ancestry, sex, sexual orientation, gender identity, marital status, civil union status, parental status, religion, national origin, age, disability, veteran status and other legally protected characteristics.

Must comply with UChicago Medicine’s COVID-19 Vaccination requirement as a condition of employment. If you have already received the vaccination, you must provide proof as part of the pre-employment process. This is in addition to your compliance with the Flu Vaccination requirement as well. Medical and religious exemptions will be considered consistent with applicable law. Lastly, a pre-employment physical, drug screening, and background check are also required for all employees prior to hire.

Compensation & Benefits Overview

UChicago Medicine is committed to transparency in compensation and benefits.  The pay range provided reflects the anticipated wage or salary reasonably expected to be offered for the position.

The pay range is based on a full-time equivalent (1.0 FTE) and is reflective of current market data, reviewed on an annual basis. Compensation offered at the time of hire will vary based on candidate qualifications and experience and organizational considerations, such as internal equity. Pay ranges for employees subject to Collective Bargaining Agreements are negotiated by the medical center and their respective union.

Review the full complement of benefit options for eligible roles at Benefits - UChicago Medicine.