Privacy Analyst

Position: Privacy Analyst Duration: 12 Months Location: Montgomery, AL (Onsite from day 1) Job ID: #13050 Agency: Medicaid Anticipated start date: 09/01/2026 Interview Types: Video/In Person based on location Position Summary The Senior Privacy Analyst supports the Agency Privacy Officer in the day-to-day operation of the Agency's privacy program. This position reviews, tracks, coordinates, and documents privacy-sensitive requests and incidents involving: Medicaid applicants, recipients, and beneficiaries Claims, eligibility, and enrollment information Provider and program integrity data Protected Health Information (PHI) Personally Identifiable Information (PII) Key Responsibilities Privacy Request Management Responsible for processing and reviewing: Individual access requests Information-gathering requests Recipient-directed disclosures HIPAA authorizations Subpoenas and court/legal requests Privacy complaints Privacy incident reports Breach reporting activities Privacy Compliance & Risk Assessment Apply HIPAA Privacy and Breach Notification requirements. Ensure compliance with Medicaid confidentiality requirements and applicable regulations. Review requests and incidents for privacy risks and compliance concerns. Verify identity and authority while adhering to minimum necessary standards. Follow established escalation procedures and privacy best practices. Conduct remote and onsite privacy assessments to verify compliance. Program Support & Audit Participation Assist in the development, implementation, maintenance, and documentation of the Agency's privacy program, including participation in federal and state audits conducted by organizations such as: Social Security Administration (SSA) Internal Revenue Service (IRS) U.S. Department of Health & Human Services (HHS) Centers for Medicare & Medicaid Services (CMS) Office for Civil Rights (OCR) State Examiner's Board Other regulatory and oversight agencies Required Knowledge Working knowledge of HIPAA Privacy Rule and Breach Notification requirements. Working knowledge of Medicaid confidentiality requirements, particularly 42 CFR Part 431, Subpart F. Understanding of 42 CFR Part 2 considerations and related privacy requirements. Required Skills Ability to review and evaluate: Subpoenas Court orders HIPAA authorizations Access requests Privacy incident reports #J-18808-Ljbffr TechNix LLC