HIPAA SME
Core
Subject Matter Expert supporting HHS OCR in reviewing security/privacy complaints, evaluating data breach reports, and providing expertise on HIPAA Security Rule compliance for healthcare organizations.
Role type
Senior HIPAA Security & Privacy Analyst
Builds
Compliance assessments, security analysis reports, and policy recommendations for OCR
Domain
US Federal Government / Healthcare Privacy & Cybersecurity
Deliverable
dashboards & analysis
Required skills
HIPAA Security Rule expertise, data breach analysis, technical security assessment, audit report generation, risk analysis, vulnerability assessment, incident response, security architecture design, policy development, NIST standards application
Preferred skills
CISSP, CISM, CIPP/CIPT certifications, 10+ years cybersecurity experience, advanced OS/network management knowledge
Technologies
NIST frameworks, digital forensics tools, penetration testing platforms, vulnerability scanners
Responsibilities
Review security and privacy complaints and data breach reports to determine HIPAA non-compliance; Evaluate technical sufficiency of submissions from covered entities and business associates; Develop written reports with technical security analyses and recommendations; Provide expertise in developing health information privacy policies and technologies; Design and manage information security and risk management programs based on HIPAA requirements
Seniority
Senior, hands-on IC
