Privacy Analyst

Overview

Opportunities for you!

- Consecutively recognized as a top employer by Forbes, and in 2025 by Newsweek

- Free Continuing Education and certification

- Tuition reimbursement, education programs and scholarships

- Vacation time starts building on Day 1, and builds with your seniority

- Free money toward retirement with a 403(b) and matching contributions

- Great food options with on-demand ordering

- Free parking and electric charging

Commitment to diversity and inclusion is a cornerstone of our culture at Community. All are welcome as valued members of our community.

We know that our ability to provide the highest level of care is through taking care of our incredible teams. Learn more on our Benefits page.

## Responsibilities
The Privacy Analyst is responsible for incident investigation and management. Investigate privacy incidents and reported events; develop recommendations regarding incidents and events. Independently conduct preliminary assessments of potential or actual privacy incidents on behalf of the Privacy Office. In collaboration with the Director, Manager, or Senior Privacy Analysts, conduct a risk assessment. Compile chronological event sequence, prepare and summarize interview notes, document the investigation and assessment, and summarize the outcome for each assigned event.Independently investigate issues, evaluate practices versus current privacy policies and laws, and recommend solutions to reduce risks. Manage multiple complex assigned projects in a timely, efficient and well-organized manner and ensure that any written material and correspondence are accurate. Responsible for information management, storage, retrieval, issue tracking, and summary reports. Represent the Privacy Office as requested during investigation meetings, meetings, training and presentations, based on organizational needs.Work to foster the development and operational implementation of appropriate privacy practices throughout the organization. The Privacy Analyst is responsible for collecting Privacy Incident data on events reported by any method, including proactive monitoring and data loss prevention (DLP). This work includes researching, examining, tracking, interviewing, and documenting HIPAA-related Privacy incidents as assigned by the Privacy Program Management.

Key Soft Skills:

- Critical thinking and professional judgment

- Attention to detail

- Discretion and integrity

- Collaboration

- Prioritization

Day-to-Day Responsibilities & Workflow

- Daily Maintenance: Review and maintain a shared analytical platform that flags questionable or inappropriate access based on office criteria.

- Investigations: Handle incoming calls, emails, and helpline/IRIS questions. Complete investigations within a strict timeline of under 15 business days per state requirements.

- Documentation & Autonomy: Document all privacy investigations within the analytical tool. Staff maintain a degree of autonomy while meeting strict milestone and documentation requirements to assess permissible business needs and recommend corrective actions if needed.

- Onboarding & Training: Expect an estimated 3 to 6 months of training to learn intaking, documentation processes, and investigation workflows.

Schedule:

- Work Location: Hybrid remote (On-site Tuesday through Thursday, remote Mondays and Fridays) at Fresno location.

- Department Hours: 8:00 AM to 4:30 PM

Qualifications

Education

- Associate's Degree required

- Bachelor's Degree in Business, Healthcare Administration, or related field preferred

- High School Diploma, High School Equivalency (HSE), or Completion of a CHS Approved Individualized Education Plan (IEP) Certificate AND 5 years of experience in the healthcare industry may be substituted for the Associate’s Degree and experience requirement

Experience

- 3 years of experience in the healthcare industry required

- 3 years of experience in privacy, medical records and health information management, release of information, or related field at an analyst level preferred

- Familiarity with the healthcare administrative environment and overall structure of a healthcare organization.

- Experience handling sensitive, privileged, or confidential patient information.

- Foundational knowledge of EMR systems (Epic is used internally) to navigate audit logs and databases for investigations.

- Proficiency in the Microsoft Office Suite (especially Excel for pulling data into spreadsheets and PowerPoint for creating/delivering presentations).

- Strong investigational report writing and presentation skills (presenting findings to leadership and educational materials to departments).

- Working knowledge of state and federal privacy laws i.e. HIPAA, CMIA, patient rights, etc

Licenses and Certifications

- CHPC - Certified Healthcare Privacy Compliance preferred

Disclaimers

• Pay ranges listed are an estimate and subject to change.• If any bonuses are noted, they are only applicable to external hires meeting criteria.