Privacy Analyst II, Compliance

WHY UT SOUTHWESTERN?
With over 75 years of excellence in Dallas-Fort Worth, Texas, UT Southwestern is committed to excellence, innovation, teamwork, and compassion. As a world-renowned medical and research center, we strive to provide the best possible care, resources, and benefits for our valued employees. Ranked as the number 1 hospital in Dallas-Fort Worth according to U.S. News & World Report, we invest in you with opportunities for career growth and development to align with your future goals. Our highly competitive benefits package offers healthcare, PTO and paid holidays, on-site childcare, wage, merit increases and so much more. We invite you to be a part of the UT Southwestern team where you'll discover a culture of teamwork, professionalism, and a rewarding career! 

JOB SUMMARY
Works under moderate supervision to manage and perform compliance assurance/effectiveness reviews of various functions and activities of UT Southwestern. Conducts complex assurance activities to determine departmental/clinical unit/program adherence to internal controls, in compliance with established policies and procedures, Health Insurance Portability and Accountability Act (HIPAA), Health Information Technology for Economic and Clinical Health Act (HITECH) and state privacy legislation. Assist, at the direction of the Privacy Officer and/or Assistant Privacy Officer, with all activities related to the implementation and operation of the Privacy Program, including assisting with privacy investigations and proactive monitoring of Epic access. 

The Privacy Analyst II triages and investigates potential privacy incidents and data breaches to determine scope, root cause, and applicable reporting requirements. Coordinates documentation, evidence collection, and communication with affected departments and leadership. Assists with breach determinations, notifications, and corrective actions in accordance with federal and state law. Maintains accurate and timely documentation in the privacy case management system.

This position offer a hybrid work schedule that includes 2 days in office (Monday and Wednesday) and 3 days remote. 

BENEFITS
UT Southwestern is proud to offer a competitive and comprehensive benefits package to eligible employees. Our benefits are designed to support your overall wellbeing, and include:

• PPO medical plan, available day one at no cost for full-time employee-only coverage
• 100% coverage for preventive healthcare-no copay
• Paid Time Off, available day one
• Retirement Programs through the Teacher Retirement System of Texas (TRS)
• Paid Parental Leave Benefit
• Wellness programs
• Tuition Reimbursement
• Public Service Loan Forgiveness (PSLF) Qualified Employer
• Learn more about these and other UTSW employee benefits!

Experience And Educationrequired

• EducationBachelor's Degree in business or healthcare administration, nursing, regulatory compliance, consulting, project management, or related area.  
• Experience3 years of professional experience in a healthcare-related field.  
• Licenses and Certifications(CHPC) HEALTHCARE PRIVACY COMPLIANCE Certification in Healthcare Privacy Compliance from the Compliance Certification Board within 1 Year or Certification in Healthcare Compliance (CHC) from the Compliance Certification Board within 1 Year  

Job Duties

• Conducts complex assurance/effectiveness reviews of Privacy Office compliance activities in accordance with appropriate standards, metrics, established compliance plan(s) and prescribed University and departmental, unit, or program policies.
• Assists in conducting complex reviews of suspicious Epic access by UTSW workforce members.
• Assists in performing investigations of alleged violations of policy, misconduct, or other acts of non-compliance to determine the cause, extent of risk and mechanisms for prevention.
• Provides input to, and assists in, evaluating the effectiveness of compliance controls used by reviewed department, unit, or program, as well as compliance with all applicable university policies and procedures.
• Provides input to, and assists in, drafting compliance reports, including development of review findings and recommendations for specific remedial/corrective actions.
• Prepares work papers to support work performed, as well as findings and recommendations included in compliance reports. Maintains documentation of Privacy Office files.
• Maintains effective working relationships with compliance personnel and external UTSW stakeholders to achieve objectives of assurance-related assignments.
• Remains abreast of current developments and revised laws and regulations pertaining to HIPAA Privacy compliance.
• Provides input and assists in developing Privacy Office compliance-related education and training materials.
• Provides input to the development of policies and procedures relating to privacy and security of patient medical information.
• Performs other duties, as assigned.

SECURITY AND EEO STATEMENT

Security
This position is security-sensitive and subject to Texas Education Code 51.215, which authorizes UT Southwestern to obtain criminal history record information.

EEO
UT Southwestern Medical Center is committed to an educational and working environment that provides equal opportunity to all members of the University community. As an equal opportunity employer, UT Southwestern prohibits unlawful discrimination, including discrimination on the basis of race, color, religion, national origin, sex, sexual orientation, gender identity, gender expression, age, disability, genetic information, citizenship status, or veteran status.