HIPAA & Privacy Analyst

This position is based in Lahore and requires full onsite presence with working hours from 5 PM to 2 AM. The role focuses on ensuring organizational compliance with HIPAA regulations and other relevant privacy laws within a US medical billing environment. The successful candidate will be responsible for developing, implementing, and maintaining policies and procedures that protect patient health information (PHI) while collaborating with various departments to manage risks and ensure security.

Key Responsibilities

- Develop and maintain comprehensive policies, procedures, and protocols to ensure compliance with HIPAA and related privacy regulations.
- Conduct regular audits and risk assessments to identify non-compliance issues or vulnerabilities concerning PHI.
- Implement corrective action plans based on audit findings, coordinating closely with relevant teams to resolve issues.
- Stay updated on changes to HIPAA regulations and industry best practices, revising policies and procedures as necessary.
- Oversee the process of obtaining patient consent and authorization for the use and disclosure of PHI.
- Work collaboratively with IT and security teams to safeguard electronic PHI (ePHI) and ensure adherence to HIPAA Security Rule requirements.
- Coordinate and deliver HIPAA training sessions to staff, promoting a clear understanding of privacy policies and compliance obligations.
- Investigate any breaches involving PHI, document incidents thoroughly, and implement corrective measures to prevent recurrence.
- Maintain detailed records of all HIPAA compliance activities, including audits, training, and incident reports.

Required Qualifications

- Bachelor’s degree from a recognized institution.
- Minimum of 3 to 5 years of hands-on experience in HIPAA compliance within a US medical billing context.
- In-depth knowledge of US HIPAA regulations, including the Privacy Rule, Security Rule, and Breach Notification Rule.
- Familiarity with healthcare industry standards for protecting PHI and ePHI.
- Strong expertise in compliance auditing, risk assessment, and corrective action planning.
- Excellent command of English, both written and verbal, with the ability to effectively train and communicate compliance requirements to staff.
- Detail-oriented with strong analytical skills to identify compliance gaps in policies and procedures.
- Ability to work collaboratively across departments while maintaining strict confidentiality of sensitive information.

Preferred Qualifications

- Certification in Healthcare Privacy and Security (CHPS) or Certified Information Privacy Professional (CIPP) is highly desirable.

This role offers an opportunity to work in a dynamic healthcare compliance environment, ensuring the protection of sensitive patient information and contributing to organizational integrity and regulatory adherence. Candidates with the required experience and qualifications are encouraged to apply.