What are the responsibilities and job description for the Senior Privacy Analyst position at System Soft Technologies?
Senior Privacy Analyst
Location: Montgomery AL
Duration: 12 Months
Senior Privacy Analyst – Contract Opportunity
Position Summary
The Senior Privacy Analyst supports the Agency Privacy Officer in the day-to-day operation of the Agency’s privacy program. Reviews, tracks, coordinates, and documents privacy-sensitive requests and incidents involving Medicaid applicants, recipients, and beneficiaries; claims, eligibility, and enrollment information; provider and program integrity data; PHI; and PII.
Key Responsibilities
Process and review individual access requests, information-gathering requests, recipient-directed disclosures, HIPAA authorizations, subpoenas and legal requests, privacy complaints, privacy incidents, and breach reporting activities.
Apply HIPAA Privacy and Breach Notification requirements.
Ensure compliance with Medicaid confidentiality requirements and regulations.
Review requests and incidents for privacy risks and compliance concerns.
Verify identity and authority while adhering to minimum necessary standards.
Conduct remote and onsite privacy assessments and follow escalation procedures.
Program Support & Audit Participation
Assist with development, implementation, maintenance, and documentation of the Agency privacy program.
Participate in audits conducted by SSA, IRS, HHS, CMS, OCR, State Examiner’s Board, and other oversight agencies.
Knowledge, Skills & Abilities
Working knowledge of HIPAA Privacy Rule and Breach Notification requirements.
Knowledge of Medicaid confidentiality requirements, including 42 CFR Part 431, Subpart F.
Understanding of 42 CFR Part 2 considerations.
Experience reviewing subpoenas, court orders, HIPAA authorizations, access requests, and privacy incident reports.
Strong analytical, documentation, compliance, and problem-solving skills.
Regulatory Knowledge Areas
HIPAA Privacy Rule
HIPAA Breach Notification Rule
Medicaid Confidentiality Requirements
42 CFR Part 431, Subpart F
42 CFR Part 2
PHI and PII Protection Standards
Minimum Necessary Standard
Identity and Authority Verification Requirements