Privacy & Data Protection Analyst

We're excited about the potential people bring to our organization. You can grow your career here while enjoying first-class perks, benefits and a culture that fosters growth, innovation and collaboration.

The Privacy and Data Protection Analyst will support Independent Health's data protection, privacy, and information governance programs. This role will collaborate with other members of the Information Risk Office (IRO), as well as the data governance, legal, IT, and analytics teams, in executing and enhancing key operational and compliance activities to safeguard both structured and unstructured data.

The individual will assist in the implementation and maintenance of Independent Health's Data Loss Prevention (DLP), Data Classification, and Data Protection programs under the guidance of senior team members. This will include monitoring, analyzing, and escalating security and privacy events; providing technical input for risk assessments; and supporting the reporting of key indicators across cybersecurity and privacy initiatives.

This position will also contribute to the privacy program to help ensure compliance with federal and state regulations, including HIPAA, Medicaid, Medicare, DFS, DOH, and other applicable laws. The analyst will help drive improvements in privacy and data protection practices and serve as a resource on matters related to data privacy and information governance.

This role will be expected to collaborate effectively with cross-functional teams, demonstrate initiative in daily activities, and support a culture of accountability, teamwork, and continuous improvement.

• Bachelor's degree required. An additional four (4) years of experience will be considered in lieu of degree.
• Four (4) years of experience in both a regulated industry operations role and data privacy, data security, risk management, or artificial intelligence required. Experience in the healthcare industry preferred.
• Industry recognized certification within the domain of information security, information technology and privacy (e.g., CISSP, GIAC, CISM, CIPT, CIPP/US, etc.) preferred.
• Experience with data security, encryption, data masking, DLP technologies, data discovery and classification tools, and data privacy, including cloud access security broker (CASB) solutions.
• Understanding of healthcare privacy program core elements as it relates to regulatory oversight, monitoring requirements and data security measures (HITRUST, NIST, ITIL, HIPAA, HITECH, etc.).
• Experience as a change agent, with the ability to leverage organizational resources for results. Ability to influence and communicate to all levels. Vision, ability, and leadership to inspire others to action.
• Excellent communication skills both verbal and written. Ability to communicate privacy goals and policies and application to staff and management.
• Ability to systematically track, document, and maintain detailed records ensuring accuracy, completeness, and alignment with regulatory and audit requirements.
• Experience making independent risk-based decisions with consideration for business and operational goals and constraints.
• Proven examples of displaying the IH values: Passionate, Caring, Respectful, Trustworthy, Collaborative and Accountable.

• Contribute to privacy and data security initiatives, including data loss prevention (DLP), data protection, and classification programs under the supervision of senior team members.
• Provide guidance on data privacy, regulatory compliance, and security matters to staff and business partners, escalating complex issues to leadership as needed.
• Monitor and maintain compliance with relevant privacy and security regulations and standards, staying informed about changes in the regulatory environment.
• Participate in the development, implementation, and upkeep of privacy and security policies, procedures, and technical controls to ensure they align with organizational goals.
• Monitor privacy and security events, maintain comprehensive tracking of events including incident details, response actions, and resolution outcomes, assist in analyzing risks, and escalate significant findings to senior staff for technical assessment and response.
• Contribute to governance reporting on cybersecurity and privacy programs, including collecting and communicating key risk and performance indicators (KRI/KPI) and program maturity metrics.
• Identify, assess, and help to address privacy risks, working with business and technical teams to support risk treatment activities.
• Support program compliance efforts with federal and state regulations, such as HIPAA and HITECH, and help monitor updates in the regulatory landscape.
• Collaborate with cross-functional teams including Information Risk, data governance, legal, IT, and analytics to assist in discovering, classifying, and protecting structured and unstructured data.
• Contribute to the development and delivery of training and awareness programs aimed at fostering a culture of privacy and security across the organization.
• Represent the team as a data security and privacy resource in internal forums and support communications with external partners when appropriate.
• Work collaboratively with internal stakeholders, including business units, IT, legal, and compliance teams, to help advance data security and privacy objectives and resolve routine issues.
• Assist in governance reporting and program monitoring activities, including gathering and sharing key risk and performance data with senior staff and leadership.
• Promote a culture of privacy and security awareness throughout Independent Health by sharing best practices and guidance on emerging risks and regulatory changes.

Immigration or work visa sponsorship will not be provided for this position

Hiring Compensation Range: $70,000 - $85,000 annually

Compensation may vary based on factors including but not limited to skills, education, location and experience. 

In addition to base compensation, associates may be eligible for a scorecard incentive, full range of benefits and generous paid time off. The base salary range is subject to change and may be modified in the future.

As an Equal Opportunity / Affirmative Action Employer, Independent Health and its affiliates will not discriminate in its employment practices due to an applicant's race, color, creed, religion, sex (including pregnancy, childbirth or related medical conditions), sexual orientation, gender identity or expression, transgender status, age, national origin, marital status, citizenship and immigration status, physical and mental disability, criminal record, genetic information, predisposition or carrier status, status with respect to receiving public assistance, domestic violence victim status, a disabled, special, recently separated, active duty wartime, campaign badge, Armed Forces service medal veteran, or any other characteristics protected under applicable law. Click here for additional EEO/AAP or Reasonable Accommodation information.

Current Associates must apply internally via the Job Hub app.