Data Privacy & Security Analyst

Role Overview

• Actively contributes to Compliance, Privacy & Ethics program activities and supports implementation of all elements of an effective compliance program.
• Provides ongoing support to the Vice President & Chief Compliance and Privacy Officer and department staff in carrying out assigned functions, work plans, and departmental goals.
• Conducts and/or assists with internal audits, continuous monitoring, and annual and routine risk assessments to evaluate compliance with laws, regulations, and organizational policies and for process improvement.
• Supports external audits and assessments (e.g., HIPAA, NIST CSF, PCI-DSS), including evidence collection, stakeholder coordination, and follow-up on remediation activities.
• Reviews and analyzes data trends, systems, tools, applications, and controls to assess compliance and identify areas for improvement.
• Supports the development, revision, and promotion of privacy, security, and compliance training and awareness initiatives across the District (e.g., cybersecurity, phishing, privacy education).
• Develops, revises, and implements privacy and security policies, procedures, and standards, including lifecycle oversight.
• Participates in or leads investigations related to reported concerns, inquiries, or potential compliance or privacy issues.
• Coordinates incident response activities and provides support for breach investigations.
• Serves as a resource to District staff and management by providing guidance on privacy, information security, and compliance requirements.

Requirements

• Bachelor’s degree in health or business-related field (preferred Information Security or Computer Science).
• Specific compliance, privacy, and/or Information Technology/Information Security (Cybersecurity) experience and certification to be considered/accepted in lieu of Education requirement.
• 2 years (minimum) of direct compliance, privacy, audit, legal, cybersecurity, or related work experience.
• Will consider highly qualified candidate with at least 5 years of direct field experience in compliance, privacy, or Information Technology (IT) / Cybersecurity program work experience, preferably in healthcare, in a large or complex organization, and a current specialized certification related to Compliance, Privacy, or Information Security/Cybersecurity.
• Certification in one of the following areas required or to be obtained within 18 months of hire or transfer into position: Certified in Healthcare Privacy Compliance (CHPC) or Certified in Healthcare Compliance (CHC) by the Healthcare Compliance Certification Board, or Certified Information Privacy Professional (CIPP) by the International Association of Privacy Professionals, or Certified Information Systems Security Professional (CISSP) by the ISC.

Tech Stack

• Cyber Security

Benefits

• We are committed to a policy of Equal Employment Opportunity and will not discriminate against an applicant or employee on the basis of race, color, creed, religion, military or veteran status, age, sex, pregnancy status, genetic information, national origin or ancestry, citizenship, physical or mental disability, marital status, sexual orientation or identification status, or any other legally recognized category protected by jurisdictional, state or federal law.
• The information collected by this application is solely to determine suitability for employment, verify identity and maintain employment statistics on applicants.
• We are also committed to maintaining a safe, healthy, and productive work environment for all employees. As such, we are a Drug-Free Workplace.