Privacy Analyst - Remote

Join the transformative team at City of Hope, where we're changing lives and making a real difference in the fight against cancer, diabetes, and other life-threatening illnesses. City of Hope's growing national system includes its Los Angeles campus, a network of clinical care locations across Southern California, a new cancer center in Orange County, California, and treatment facilities in Atlanta, Chicago and Phoenix. Our dedicated and compassionate employees are driven by a common mission: To deliver the cures of tomorrow to the people who need them today.

** This is a Fully Remote Opportunity within the United States**

As a successful candidate, you will:

The Privacy Analyst plays a crucial role in supporting City of Hope's comprehensive Privacy Program. This involves auditing, investigating, and mitigating risks in accordance with federal and state privacy laws, including HIPAA and relevant state regulations. Under the direction of the Privacy Manager, the Privacy Analyst engages in proactive privacy monitoring, conducts data analysis, investigates incidents, and contributes to enterprise training, policy maintenance, and process improvements.

This position is an entry-level professional role, serving as a foundational step for advancement within the Privacy Program, such as progressing to the role of Privacy Manager. The incumbent exercises analytical judgment, discretion, and confidentiality to ensure compliance with privacy regulations while enhancing the organization's overall privacy practices. Additionally, the Privacy Analyst collaborates with various departments, including Enterprise Technology, Research Compliance, Human Resources, Health Information Management Services, and Legal, to ensure the consistent application of privacy principles across all operations.

Privacy Auditing & Monitoring

• Conduct proactive internal audits of privacy access using audit and monitoring tools such as Epic, BlueSight, or GRC systems.

• Support external audits and collaborate with other departments to ensure timely follow-up and resolution of any issues.

• Identify potential unauthorized access or misuse of PHI and escalate findings to the Privacy Manager and/or Chief Privacy Officer.

• Incident Response & Investigations

• Assist in responding to and investigating privacy-related reports, hotline complaints, and regulatory inquiries.

• Support the documentation of incidents, analyze breaches, and manage the notification processes for patients and regulators.

• Maintain accurate case documentation in the GRC platform, and assist in root cause analysis and tracking corrective actions.

Data Protection & Risk Assessment

• Participate in Privacy Impact Assessments and data flow mapping for new systems, vendors, and research collaborations.

• Assist with monitoring data loss prevention, conducting access control reviews, and evaluating vendor privacy risks.

• Collaborate with the Enterprise Technology and Legal teams during technology implementation and contract reviews.

Training & Education

• Support the development and delivery of privacy awareness and compliance training for workforce members.

• Provide privacy guidance and support to staff across departments, escalating complex inquiries to the Privacy Manager.

Policy & Program Support

• Assist with reviewing, updating, and maintaining privacy-related policies and procedures.

• Track departmental metrics and contribute to quarterly and annual reporting on privacy performance indicators.

• Maintain agendas, minutes, and action logs for the Privacy & Security Compliance Committee.

• Continuous Improvement & Collaboration

• Collaborate with stakeholders throughout the organization to identify opportunities for process improvement and enhance controls.

• Participate in special projects that strengthen the overall privacy practices of City of Hope.

Professional Development

• Stay current on federal and state privacy laws, regulations, and best practices through training, workshops, and professional development.

• Maintain or obtain a privacy certification (e.g., CHPC, CIPP/US, or equivalent) within the first year of employment.

• Performs other related duties as assigned or requested.

Your qualifications should include:

• Bachelor's degree

• 4 additional years of experience plus the minimum experience requirement may substitute for minimum education

• 1-3+ years' experience in privacy, information security, compliance, or other healthcare-related field.

Pref. Certification/Licensure:

• Certification in Healthcare Privacy Compliance (CHPC) or other privacy-related certification must be earned within the first year of employment.

• Two years of experience in healthcare privacy, information security, compliance, or data governance is preferred.

• Knowledge of HIPAA, HITECH, and privacy regulations is essential. Candidates should possess strong attention to detail, excellent communication skills, and problem-solving abilities. The ability to convey complex regulatory concepts clearly is crucial, along with integrity and a commitment to confidentiality. Candidates must manage multiple priorities, meet deadlines, and adapt to changing regulations, while also demonstrating strong interpersonal skills for effective collaboration.

City of Hope employees pay is based on the following criteria: work experience, qualifications, and work location.

City of Hope is an equal opportunity employer.

To learn more about our Comprehensive Benefits, please CLICK HERE.