Privacy Analyst

Description Office of Compliance Services

Support the privacy compliance functions of the Office of
Compliance Services through investigations, regulatory guidance, auditing,
education, and privacy risk management. As the Privacy Analyst, you will
evaluate privacy incidents, interpret applicable laws and regulations, assess
organizational practices, and advise departments on requirements involving
protected health information and other sensitive information. This role works
closely with operational departments, Information Security, Legal Affairs, Human
Resources, Audit Advisory Services, and other stakeholders to strengthen
compliance with HIPAA, CMIA, University of California and UCLA Health privacy
policies, and other applicable privacy requirements.

In this role, you will:

• Conduct and support privacy incident reviews and investigations, including
  gathering and analyzing documentation, participating in interviews, maintaining
  investigative workpapers, preparing reports, and assisting with mitigation,
  corrective actions, and reporting obligations.

• Review policies, procedures, workflows, agreements, Data Use Agreements,
  access requests, and other business practices to identify privacy risks,
  recommend revisions, and support appropriate use, disclosure, access, and
  safeguarding of protected health information.

• Research and interpret federal and state privacy laws and emerging regulatory
  requirements, and provide guidance to departments and stakeholders on complex
  privacy compliance matters.

• Conduct privacy audits, access reviews, monitoring activities, and targeted
  compliance reviews; prepare findings and recommendations, track corrective
  actions, and support improvements to auditing and monitoring processes.

• Develop, coordinate, and deliver privacy education and training, including
  targeted education based on findings from investigations, audits, monitoring
  activities, and regulatory changes.

• Develop guidance documents, job aids, reports, monitoring tools,
  presentations, and other resources that strengthen the Privacy Compliance
  Program and support compliance committees and organizational leadership.

• Collaborate with operational departments, Audit Advisory Services,
  Information Security, Legal Affairs, Human Resources, regulatory agencies, and
  other stakeholders on privacy investigations, compliance initiatives,
  remediation efforts, and organizational privacy practices.

Salary Range:

$88,900 to $190,300 annually

Qualifications Required

• Bachelor’s degree from an accredited academic institution or equivalent
  credentials.

• CHPC certification.

• Demonstrated expertise conducting investigations, interviewing witnesses, and
  preparing investigation reports.

• Demonstrated experience preparing educational programs and performing audits.

• Demonstrated experience reviewing and revising transactional documents such
  as Business Associate Agreements and Data Use Agreements.

• Excellent analytical and problem-solving skills, including the ability to
  conduct effective and accurate regulatory research and analysis.

• Strong written and verbal communication skills.

• Ability to work independently and collaboratively while establishing and
  maintaining effective professional relationships with internal and external
  stakeholders.

• Strong attention to detail with the ability to manage difficult and sensitive
  situations, prioritize multiple responsibilities, and effectively manage
  fluctuating workload demands.

Preferred

• Advanced degree in a related field.

• Three years of experience in a healthcare or academic medical center setting.
  An advanced academic degree may be considered in lieu of experience.

• CIPP certification.

• CHC certification.