Privacy Analyst

Thank you for considering a career at Bon Secours Mercy Health! Scheduled Weekly Hours: 40 Work Shift: Days (United States of America) Primary Function/General Purpose of Position The Privacy Analyst investigates potential privacy breaches and noncompliance with BSMH Privacy/HIPAA-related policies. The Analyst is responsible for implementing and administering BSMH’s Privacy policies and procedures, and helping to ensure compliance with HIPAA, HITECH and state mandated privacy and confidentiality requirements.

The Analyst participates in other privacy-related duties as necessary or as assigned. Essential Job Functions Investigates, documents, and reports on issues related to privacy and confidentiality of Protected Health Information (PHI) under HIPAA (Health Insurance Portability and Accountability Act of 1996). Reports breaches to the DHHS Office for Civil Rights (OCR) in compliance with governing federal laws and prepares breach notification letters per the requirements of BSMH policies.

Requests data and/or access audits of electronic systems and incorporates audit finding results into investigations. Creates and maintains electronic documentation for privacy incident investigations, resolutions, and corrective actions/sanctions. Meets regularly with and keeps Director, Privacy apprised of the status of all investigations and projects.

Ensures corrective action plans addressing HIPAA are implemented and functional. Maintains confidentiality of investigations. Travel, if required by the Director, Privacy and approved by the VP, Compliance and Privacy, to complete on-site education and investigations. This document is not an exhaustive list of all responsibilities, skills, duties, requirements, or working conditions associated with the job.

Employees may be required to perform other job-related duties as required by their supervisor, subject to reasonable accommodation. Licensing/Certification Certified in Healthcare Privacy Compliance

• Health Care Compliance Association (preferred) Certified Information Privacy Manager
• International Association of Privacy Professionals (preferred).

Education

Bachelors, Business Administration, Health Care Management, Nursing, or Health Information Management (preferred). Work Experience 4-6 years’ experience working with HIPAA and HITECH privacy rules or related compliance areas (required) Prior healthcare experience (preferred). EPIC Electronic Health Record experience (preferred).

Training None Language None Patient Population Not applicable to this position Working Conditions Periods of high stress and fluctuating workloads may occur. Long-distance or air travel as needed- not to exceed 10% travel. General office environment. May have periods of constant interruptions. Required to car travel to off-site locations, occasionally in adverse weather conditions.

Prolonged periods of working alone. Additional Physical Requirements/Hazards Physical Requirements Acuity – near Hazards Not applicable to this position Skills Strong knowledge of Privacy, Security, and Breach Notification Laws Advanced skill in Conducting, documenting, and reporting privacy incidents and breaches. Drafting and issuing breach notification letters per regulatory requirements.

Strong skills with Incident Management Systems (e.g., Symplr, SafeCARE) Reporting breaches to the DHHS Office for Civil Rights (OCR) and other authorities Proficient in creating and maintaining electronic records for investigations and resolutions. Proficient in Electronic Health Record (EHR) & Safet Event system proficiency (e.

g., EPIC, SafeCARE) Proficient in Microsoft Office & Co. Pilot Proficiency Attention to Detail Maintaining strict privacy of sensitive information Clear Communication & Active Listening Skills Thriving in fast-paced, changing regulatory environments Collaboration with team and stakeholders Handling privacy complaints with empathy and professionalism Managing multiple investigations and deadlines efficiently.

Keeping records and projects well-structured Handling stressful situations and fluctuating workloads Integrity in everything Bon Secours Mercy Health is an equal opportunity employer. As a Bon Secours Mercy Health associate, you’re part of a Mission that matters. We support your well-being – personally and professionally.

Our benefits are built to grow with you and meet your unique needs, every step of the way.

What we offer

Competitive pay, incentives, referral bonuses and 403(b) with employer contributions (when eligible) Medical, dental, vision, prescription coverage, HSA/FSA options, life insurances, mental health resources and discounts Paid time off, parental and FMLA leave, short- and long-term disability, backup care for children and elders Tuition assistance, professional development and continuing education support Benefits may vary based on the market and employment status.

Department: SS Enterprise Risk

• Corp Responsibility It is our policy to abide by all Federal and State laws, as well as, the requirements of 41 CFR 60-1.4(a), 60-300.5(a) and 60-741.5(a). Accordingly, all applicants will receive consideration for employment without regard to race, color, national origin, religion, sex, sexual orientation, gender identity, age, genetic information, or protected veteran status, and will not be discriminated against on the basis of disability. If you’d like to view a copy of the affirmative action plan or policy statement for Mercy Health– Youngstown, Ohio or Bon Secours – Franklin, Virginia; Petersburg, Virginia; and Emporia, Virginia, which are Affirmative Action and Equal Opportunity Employer, please email [email protected] . If you are an individual with a disability and would like to request a reasonable accommodation as part of the employment selection process, please contact The Talent Acquisition Team at [email protected] .