What are the responsibilities and job description for the Privacy Auditor position at University Health System- San Antonio?
POSITION SUMMARY/RESPONSIBILITIES
This position supports University Heath’s patient privacy program under the direction of the Chief Compliance/HIPAA Officer. Responsibilities include conducting privacy audits and monitoring activities to ensure compliance with University Health’s privacy policies. The position analyzes data from various platforms for audits and contributes to achieving the department's annual Work Plan by completing assigned projects.
The Privacy Auditor performs detailed operational and privacy audits from start to finish, following departmental procedures. They also serve as a resource for employees, providing training and guidance on privacy, data security, and business associate agreements (BAAs).
This role provides the Chief Compliance/HIPAA Officer with objective analyses, recommendations, and feedback on reviewed activities. It requires professionalism, efficiency, and integrity in all interactions while safeguarding confidentiality. Strong working relationships with University Health staff, executives, Board of Managers, physicians, patients, and guests are essential.
EDUCATION/EXPERIENCE
Bachelor’s degree is strongly preferred. Candidates with four years of related experience and recent enrollment in a bachelor’s degree program from an accredited college or university, with intention of earning a degree within next three years may be considered. Certification as a Registered Health Information Administrator (RHIA), or Registered Health Information Technician (RHIT), or in Healthcare Privacy Compliance (CHPC), or Healthcare Privacy and Security (CHPS) is preferable. Minimum of 3 years’ experience in patient privacy, regulatory compliance, auditing, or contract monitoring. Must be able to effectively communicate and interact with all levels of University Health staff and the public at large. Must have the ability to research, read, and interpret federal regulations. Must have the ability to develop and write policies and procedures, write reports, and prepare business correspondence. Must have the ability to define problems, collect data, establish facts, and draw valid conclusions.
