HIPAA & Privacy Analyst

This position is based in Lahore and requires full onsite presence with working hours from 5 PM to 2 AM. The role focuses on ensuring strict compliance with HIPAA regulations and other relevant privacy laws within a US medical billing environment. The successful candidate will be responsible for developing and maintaining policies, conducting audits, managing risk assessments, and collaborating with various teams to safeguard protected health information (PHI).

Key Responsibilities

- Develop and maintain comprehensive policies, procedures, and protocols to ensure compliance with HIPAA regulations and applicable privacy laws.
- Conduct regular audits and assessments to identify non-compliance issues or potential risks related to PHI.
- Implement corrective action plans based on audit findings, working closely with relevant departments to address any gaps.
- Stay updated on changes in HIPAA regulations and industry best practices, revising policies and procedures accordingly.
- Oversee the process of obtaining patient consent and authorization for the use and disclosure of PHI.
- Collaborate with IT and security teams to ensure the security of electronic PHI (ePHI) and adherence to HIPAA Security Rule requirements.
- Coordinate and deliver HIPAA training sessions to staff, ensuring a clear understanding of privacy policies and compliance obligations.
- Respond promptly to any breaches of PHI, investigate incidents thoroughly, document findings, and implement corrective measures.
- Maintain accurate and detailed records of compliance activities, including audits, training sessions, and incident reports.

Required Qualifications

- Bachelor’s degree from a recognized institution.
- Minimum of 3 to 5 years of experience specifically in HIPAA compliance within a US medical billing context.
- In-depth knowledge of US HIPAA regulations, including the Privacy Rule, Security Rule, and Breach Notification Rule.
- Familiarity with healthcare industry standards for protecting PHI, including electronic PHI (ePHI).
- Strong expertise in compliance auditing, risk assessment, and corrective action planning.
- Excellent command of English with strong communication skills, capable of effectively training and educating staff on HIPAA requirements.
- Detail-oriented with the ability to critically analyze policies, procedures, and processes to identify compliance gaps.
- Ability to work collaboratively across departments while maintaining strict confidentiality of sensitive information.

Preferred Qualifications and Benefits

- Certification in Healthcare Privacy and Security (CHPS) or Certified Information Privacy Professional (CIPP) is highly desirable.

This role offers an excellent opportunity for professionals seeking to advance their career in healthcare compliance within a dynamic, onsite work environment. Candidates with a strong compliance background and a commitment to protecting patient information will find this position rewarding.