Compliance Associate, II

The Compliance Associate II, Privacy plays a key role in protecting patient privacy and supporting Northwestern Medicine's compliance program. This position is responsible for investigating privacy-related concerns, conducting risk assessments and audits, identifying potential compliance issues, and partnering with stakeholders across the organization to promote adherence to HIPAA and other regulatory requirements. Through analysis, education, and collaboration, this role helps strengthen the organization's culture of compliance and safeguard patient information. Responsibilities: • Maintain current knowledge of federal, state, and local laws, regulations, and industry standards impacting healthcare compliance and privacy; assess organizational impact and provide guidance regarding new or revised requirements. • Receive, investigate, document, resolve, and report all incoming compliance-related concerns, with a focus on HIPAA patient privacy. • Manage compliance concerns reported via the Compliance Hotline, email, and phone, including intake, triage, investigation, and resolution. • Conduct privacy assessments, including HIPAA risk assessments, by collecting, analyzing, and reporting relevant information to evaluate risks, identify root causes of reported or identified issues, and determine appropriate mitigation and escalation actions. • Design and conduct audits of electronic health record (EHR) access; analyze results and identify potential inappropriate access, use, or disclosure of protected health information. • Assist departments in developing and monitoring corrective action plans to address identified compliance and privacy issues. • Track, monitor, and maintain privacy incidents, investigations, and inquiries within departmental databases and case management systems. • Respond to queries or allegations and appropriately refer matters to Human Resources, Risk Management, the Office of General Counsel, or other departments, as necessary. • Collaborate with cross-functional stakeholders to promote and maintain compliance with privacy and data protection requirements. • Coordinate privacy related audits, reviews and, when necessary, investigations (in conjunction with the Corporate Compliance Manager) in response to CMS, OIG, and/or other regulatory bodies or organizational needs. • Provide guidance on privacy-related matters and supporting the development of compliance education, training materials, policies, and procedures. • Assist with the development, implementation, and monitoring of the annual Compliance Work Plan. • Participate in process improvement initiatives designed to strengthen compliance and privacy program effectiveness. • Provide data reporting and analysis of privacy program activities for internal and executive reporting. • Provides administrative support to the department and coordinates with other departments and activities, as needed. • Perform other duties as assigned. Minimum Requirements: • Education: • Advanced degree (JD, MJ) in related area or an equivalent combination of education and experience. • Experience: • Two years of experience in healthcare privacy or health information management related field • Demonstrated knowledge of HIPAA Privacy and Security requirements and healthcare privacy practices. • Proficiency with Microsoft Office applications, including Word, Excel, and PowerPoint. • Behavioral Attributes: • Demonstrated ability to work with various levels within the organization regarding confidential information and maintain sensitive data. • Ability to manage highly confidential information and exercise sound professional judgment. • Strong analytical, investigative, problem-solving, and decision-making skills. • Excellent verbal, written, and interpersonal communication skills. • Strong organizational skills and demonstrated ability to manage multiple priorities and projects simultaneously. Preferred: • Certified Healthcare Compliance (CHC) certification. • JD, MJ or similar degree. • Healthcare compliance experience. Northwestern Medicine is an equal opportunity employer (disability, VETS) and does not discriminate in hiring or employment on the basis of age, sex, race, color, religion, national origin, gender identity, veteran status, disability, sexual orientation or any other protected status. Background Check Northwestern Medicine conducts a background check that includes criminal history on newly hired team members and, at times, internal transfers. If you are offered a position with us, you will be required to complete an authorization and disclosure form that gives Northwestern Medicine permission to run the background check. Results are evaluated on a case-by-case basis, and we follow all local, state, and federal laws, including the Illinois Health Care Worker Background Check Act. Artificial Intelligence Disclosure Artificial Intelligence (AI) tools may be used in some portions of the candidate review process for this position, however, all employment decisions will be made by a person. Benefits We offer a wide range of benefits that provide employees with tools and resources to improve their physical, emotional, and financial well-being while providing protection for unexpected life events. Click on or copy and paste URL to your browser to view detailed benefits information NorthwesternMedicine Career Page https://jobs.nm.org/benefits Please refer to the Benefits Eligibility by Employment Classification to determine benefits eligibility for job postings. If sign-on bonus is included in a job posting eligibility is as followed: Internal employees and rehires who left Northwestern Medicine within 1 year are not eligible for the sign-on bonus. Exception : New graduate internal employees seeking their first licensed clinical position as a Registered Nurse at NM may be eligible.