About the Role
The Privacy Specialist reports to the HHSC Privacy Director and performs moderately advanced consultative services and technical assistance work for internal and external agency partners during privacy investigations. This role involves leading or participating in investigations of privacy incidents, collecting and validating data, researching privacy practices, providing coordinated responses to regulatory investigations, developing reports, preparing privacy-related trainings, and assisting with privacy policies and procedures.
Responsibilities
- Leads or participates in privacy incident response activities, including triage and investigation, regulatory research, third party contractual obligations, risk assessment, breach determination, remediation, notification, prevention, and analysis.
- Coordinates with internal and external agency partners to investigate incidents, document findings, and share recommendations.
- Maintains privacy-related compliance records for federal audits and compiles relevant information for required reporting to federal officials.
- Validates data and prepares briefing materials for leadership.
- Provides technical assistance to other program areas to facilitate the implementation of policy or program changes impacted by privacy issues.
- Plans and conducts detailed, complex research and analyses of privacy complaints, including analysis of compliance with rules, policies, laws, regulations, operational procedures, and policies.
- Collects, validates, and documents findings, reports, and other information to identify operational trends and potentially emerging operational issues related to privacy.
- Reports relevant changes and their implications to division leadership.
- Reports privacy breaches to the federal government, as required.
- Utilizes Archer eGRC and data visualization software to develop reports for leadership.
- Assists with the development, maintenance, and review of privacy-related manuals, policies, and procedures.
- Serves as Archer eGRC backup for application development, testing, and production.
- Researches and monitors current and emerging regulatory requirements related to privacy, including potential implications of statutory or policy changes.
- Researches and monitors industry best practices to make recommendations for the development and improvement of privacy-related processes and activities.
Requirements
- Bachelor's degree in a relevant field is preferred.
- Experience performing professional work involving investigation, analysis, compliance, auditing, risk assessment, case review, regulatory review, quality assurance, program policy, legal or policy research, or other work requiring the evaluation of facts, application of standards or requirements, professional judgment, and written documentation of findings, conclusions, or recommendations is required.
Skills
- Knowledge of HHSC divisions, business, and program areas.
- Knowledge of Medicaid, CHIP, SNAP, and TANF.
- Knowledge of Federal and state privacy laws, regulations, and rules (e.g., HIPAA; Texas Identity Theft Enforcement and Protection Act), including applicable reporting and breach notification requirements and timelines.
- Knowledge of Personally Identifiable Information (PII), Protected Health Information (PHI), Sensitive Personal Information (SPI), and other confidential or sensitive information types.
- Knowledge of privacy incident and breach investigation principles, including incident identification, assessment, documentation, mitigation, and resolution.
- Knowledge of root cause analysis and corrective action principles.
- Skill in investigating privacy incidents and gathering, reviewing, and evaluating relevant facts and evidence.
- Skill in analyzing complex or incomplete information and identifying privacy risks, compliance concerns, and additional information needed to complete an investigation.
- Skill in preparing professional written communications, investigative summaries, reports, and recommendations.
- Skill in managing multiple investigations and assignments simultaneously while meeting regulatory and organizational deadlines.
- Skill in reviewing and organizing supporting documentation such as emails, policies, procedures, system records, and contractual requirements.
- Skill in maintaining effective working relationships.
- Ability to independently plan, conduct, and document incident investigations from initial report through resolution.
- Ability to exercise sound judgment when facts are incomplete, conflicting, or evolving.
- Ability to identify gaps or inconsistencies in available information and pursue appropriate follow-up.
- Ability to handle confidential and sensitive information with discretion and care.
- Ability to organize complex facts and develop clear, logical, and well-supported conclusions.
- Ability to recognize matters that require escalation to management or other agency partners.
- Ability to prioritize assignments based on risk, regulatory requirements, and established deadlines.
- Ability to adapt to changing facts, priorities, regulatory requirements, and organizational needs.
Location
- AUSTIN
Work Type
- Full time
- Eligible for Telework
Experience Level
- Professional work involving investigation, analysis, compliance, auditing, risk assessment, case review, regulatory review, quality assurance, program policy, legal or policy research, or other work requiring the evaluation of facts, application of standards or requirements, professional judgment, and written documentation of findings, conclusions, or recommendations is required.
Education Level
- Bachelor's degree in a relevant field is preferred.
Salary/Compensations
- $5,250.00 - $6,250.00 Monthly
Benefits
- 100% paid employee health insurance for full-time eligible employees
- Defined benefit pension plan
- Generous time off benefits
- Numerous opportunities for career advancement
About the Company
- Join the Texas Health and Human Services Commission (HHSC) and be part of a team committed to creating a positive impact in the lives of fellow Texans.
- At HHSC, your contributions matter, and we support you at each stage of your life and work journey.
Equal Opportunity
- In compliance with the Americans with Disabilities Act (ADA), HHSC and DSHS agencies will provide reasonable accommodation during the hiring and selection process for qualified individuals with a disability.
- Depending on the program area and position requirements, applicants selected for hire may be required to pass background and other due diligence checks.
- HHSC uses E-Verify. You must bring your I-9 documentation with you on your first day of work.
- This position may be eligible for telework. Please note, all HHS positions are subject to state and agency telework policies in addition to the discretion of the direct supervisor and business needs.
