HIPAA Privacy Analyst

• Schedule: Full-time (40 hours/week)
• Location: Hybrid- Expectations of travel to Northeast Minneapolis Corporate Office
• Salary Range: Starting range $64,001.60 - $79,996.80/year. Where an applicant may fall on the salary range will vary based on a variety of factors, including but not limited to experience & education)

• Health Coverage: Medical, Dental & Vision Insurance
• Retirement: 401(K) with Company Match, Profit Sharing
• Time Off: Generous PTO, Holiday Pay, Floating Holiday
• Disability Coverage: Short & Long-Term Disability
• Family Support: Paid Leave and Disability
• Performance Incentive: Discretionary Bonus Based on Company, Department, and Individual Goals

Privacy Compliance & Program Support

• Support day-to-day operation of the HIPAA Privacy Program
• Interpret and apply HIPAA Privacy Rule requirements
• Maintain and update privacy policies and procedures

Incident Response & Investigations

• Investigate potential privacy incidents and inappropriate PHI access
• Conduct breach risk assessments and support notifications

Auditing & Monitoring

• Perform audits of system access and PHI usage
• Identify trends and recommend corrective actions

Workforce Education

• Deliver privacy training and guidance

Vendor Risk Support

• Review BAAs and vendor privacy practices

AI & Data Governance

• Evaluate AI tools and data use practices for compliance
• Review de-identification and model training use cases

Data Subject Requests

• Process patient access and amendment requests

Essential Functions: In order to perform this job successfully, an individual must be able to perform each essential function satisfactorily and regular attendance is required. The responsibilities listed below are representative of the primary essential functions required; additional duties may be assigned. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Bachelor's degree in a relevant field required
• 2-5+ years of healthcare privacy or compliance experience required
• Knowledge of HIPAA Privacy and Breach Notification Rules required
• CHPC, CHPS, or similar certification preferred
• Experience with EHR systems and vendor risk preferred
• Exposure to AI governance or data analytics preferred

Qualification Requirements: The qualifications listed below are representative of the knowledge, skills, and/or abilities required to perform the essential functions of this position. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Analytical and investigative skills
• Strong attention to detail
• Effective communication skills

• Ability to translate regulations into practice

Physical Requirements: The physical requirements described here are representative of the physical demands required by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

While performing the duties of this job, the employee may be required to walk, sit, stand, reach overhead, and bend to the floor. The employee is regularly required to talk and hear. The employee is required to use dexterity of hands and fingers to operate a computer keyboard, mouse, and other office equipment. Specific vision abilities required by this job include close vision and ability to adjust focus. The employee may be required to lift and transport items up to 10 pounds occasionally. Employees may be required to travel to other company locations due to staffing and training needs.

Working Environment: The working environment described here is representative of the setting which an employee may encounter on the job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

While performing the duties of this position, the employee works in an office environment. The employee is exposed to a computer monitor daily. The employee may be required to travel by automobile and exposed to changing weather conditions while performing the duties of this position. The employee must be alert to conditions that may impact the safety of patients, employees and visitors while performing the duties of this position. The employee is exposed to a computer monitor daily.

This job description reflects management's assignment of key responsibilities; it does not prescribe or restrict the tasks that may be assigned.

MNGI Digestive Health provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

It is the policy of MNGI Digestive Health to comply with all federal and state laws concerning the employment of persons with disabilities and to act in accordance with regulations and guidance issued by the Equal Employment Opportunity Commission (EEOC). Furthermore, it is the company policy not to discriminate against qualified individuals with disabilities in regard to application procedures, hiring, advancement, discharge, compensation, training or other terms, conditions and privileges of employment

MNGI's Culture of Caring

We are caring people, caring for people - working with Compassion, Teamwork, and Integrity

• Compassion: being empathetic and considerate of the needs of our patients and caregivers
• Teamwork: Being accountable for actions, supporting each other in meeting the needs of our patients, and respecting the voice/opinions of others assuming good intent.
• Integrity: Demonstrating honesty, trustworthiness, and transparency whenever you interact with patients or each other.