Senior Privacy Analyst

The Senior Privacy Analyst supports the Agency Privacy Officer in the day-to-day operation of the Agency’s privacy program. Reviews, tracks, coordinates, and documents privacy-sensitive requests and incidents involving Medicaid applicants, recipients, and beneficiaries; claims, eligibility, and enrollment information; provider and program integrity data; PHI; and PII. Responsibilities Process and review individual access requests, information-gathering requests, recipient-directed disclosures, HIPAA authorizations, subpoenas and legal requests, privacy complaints, privacy incidents, and breach reporting activities. Apply HIPAA Privacy and Breach Notification requirements. Ensure compliance with Medicaid confidentiality requirements and regulations. Review requests and incidents for privacy risks and compliance concerns. Verify identity and authority while adhering to minimum necessary standards. Conduct remote and onsite privacy assessments and follow escalation procedures. Program Support & Audit Participation Assist with development, implementation, maintenance, and documentation of the Agency privacy program. Participate in audits conducted by SSA, IRS, HHS, CMS, OCR, State Examiner’s Board, and other oversight agencies. Qualifications Working knowledge of HIPAA Privacy Rule and Breach Notification requirements. Knowledge of Medicaid confidentiality requirements, including 42 CFR Part 431, Subpart F. Understanding of 42 CFR Part 2 considerations. Experience reviewing subpoenas, court orders, HIPAA authorizations, access requests, and privacy incident reports. Strong analytical, documentation, compliance, and problem-solving skills. Regulatory Knowledge Areas HIPAA Privacy Rule Medicaid Confidentiality Requirements 42 CFR Part 431, Subpart F 42 CFR Part 2 PHI and PII Protection Standards Minimum Necessary Standard Identity and Authority Verification Requirements #J-18808-Ljbffr System Soft Technologies