Privacy Incidents & Rights Analyst II at American Specialty Health, Inc. | All Remote Jobs
American Specialty Health, Inc.
Privacy Incidents & Rights Analyst II
United States · remote · USD 56700-74000 annual
himalayasseo_indexablePosted 2026-08-19First seen 2026-09-09
Role overview
American Specialty Health Incorporated (ASH) is seeking a Privacy Incidents & Rights Analyst II to join our Regulatory Strategic Development department.
The primary purpose of this position is to support the company's compliance efforts with particular focus on supporting the functions of the company's Privacy Office. Note: The individual in this position is not intended to practice law or provide legal advice.
Salary Range
American Specialty Health complies with state and federal wage and hour laws and compensation depends upon candidate’s qualifications, education, skill set, years of experience, and internal equity. $56,700 to $74,000 Full-Time Annual Salary Range.
Remote Worker Guidelines
Remote Worker Guidelines: This position will be trained remotely and must be able to work from home (WFH) in a designated work area with company-provided technology equipment. This WFH position requires you have a stable connection to your Internet Service Provider with the ability to participate by video in online meetings over a reliable and consistent network. The internet connection must have a consistent 50 down/10 up Mbps minimum internet speed. 100 down/20 up is recommended to support higher quality video meetings.
Responsibilities
Supports Privacy Office activities by focusing on the following key accountabilities with limited supervision by the Sr. Manager, Privacy Office:
Record, process and manage requests received by the Privacy Office in relation to HIPAA and state privacy rights within a thorough and timely manner with limited oversight. This includes but is not limited to: 1) validating requests for releases of protected health information and authorizations for personal representatives, 2) responding to privacy rights-related requests (e.g., accountings, amendments, restrictions, deletions, opt-outs) , 3) coordinating such efforts among multiple internal departments, and 4) maintaining documentation of actions taken for reporting purposes.
Monitor and document receipt and resolution of assigned hotlines and group email accounts on behalf of the Privacy Office within applicable time frames. Report non-routine requests to management and coordinate subpoena requests with Legal. Serve as back-up to the Sr. Manager, Privacy Incidents & Rights for all related privacy office functions involving privacy rights.
As directed by management, and as back-up to the Privacy Incident team, thoroughly investigate and document reports of unauthorized disclosures of protected health information within required time frames. Keep management informed of issues related to such activity.
Prepares timely and accurate periodic reports of activity related to Privacy Rights as directed by management.
Communicate and coordinate externally with regulatory authorities and external clients as directed by management, to understand compliance expectations including, but not limited to, successfully negotiating with such authorities to achieve interpretations of regulatory requirements, consulting with supervisor on an ad-hoc basis regarding outcome of such communication. Educates external contacts regarding unique aspects of ASH’s business practices.
Communicate and coordinate internally with various departments to understand rationale of operations and to communicate regulatory enforcement expectations of such operations including recommending courses of action, interpreting and translating enforcement expectations to current business practices. Communicate effectively with internal departments to obtain necessary information for regulatory filings based on the needs of each regulatory agency, in part by educating internal contacts on the unique regulatory environments in assigned states. Consult with supervisors on an as needed basis to resolve any issues.
Serves as a subject matter expert on regulatory compliance topics (primarily privacy and other federal issues as needed) relevant to ASH business in a constantly evolving regulatory environment that can impact various products. Supports Privacy Office initiatives regarding PHI Inventory Assessment/Data Mapping, Document Retention, including developing and modifying assessments, procedures, program materials and training tools as assigned by management.
Under limited supervision, works to research, communicate and coordinate regulatory compliance issues across multiple disciplines and levels of workforce (i.e. communicates well with staff ranging from entry level to senior executive level personnel).
Under limited supervision, completes detailed analysis of federal legislative and regulatory issues in a timely manner as directed by management. Assess and determine impact of regulatory changes on business operations, consulting with supervisor on an ad-hoc basis to resolve any high-level regulatory compliance issues. On an ad-hoc basis, completes regulatory research projects across multiple disciplines and states.
Under minimal supervision, performs detailed research, analysis, and summarization of privacy compliance issues. Consults with supervisor on an as needed basis to resolve compliance issues.
Supports the company’s overall activities by focusing on the following:
Provides Management with periodic updates regarding individual assignments.
Informs Management of urgent issues.
Assists Management with the training of staff on ASH policies and procedures, department goals and regulatory compliance issues.
Represents the company in an ethical, professional, and positive manner.
Maintains confidentiality of all company information and uses discretion in discussing regulatory compliance issues with internal contacts.
Maintains computer and system skills necessary to perform job functions.
Photocopies, files, scans and faxes as needed to support job responsibilities.
Strictly adheres to department administrative guidelines including, but not limited to, guidelines regarding project tracking and record keeping practices.
Completes all ASH University training requirements, including required regulatory trainings, as well as ad hoc trainings required by management, within required time frames.
Performs other duties as assigned.
Complies with all policies and standards.
Qualifications
Bachelor’s Degree in English, History, Political Science, similar field of study or equivalent experience required. If equivalent experience, High School Diploma required.
Master’s Degree in Health Care Administration, Paralegal or Legal preferred.
3 years of experience with regulatory compliance in a health care environment, with experience in regulatory compliance research, privacy regulations and federal regulatory issues required.
Experience with health insurance contracts and certificate forms and working with health plans and employer groups preferred.
Knowledge of state and federal privacy laws and regulations, such as HIPAA, GLBA and GINA, as well as general understanding of state and federal rules on managed care and wellness benefits strongly preferred.
Excellent research skills.
Strong analytical and writing skills.
In-depth understanding of ASH systems, policies and procedures preferred.
Proficient in MS Office, including Word and Excel; strong computer skills preferred.
Demonstrated organizational skills.
Core Competencies
Demonstrated ability to interact in a positive, respectful manner and establish and maintain cooperative working relationships.
Ability to display excellent customer service to meet the needs and expectations of both internal and external customers.
Excellent listening and interpersonal communication skills to identify critical core competencies based on success factors and organizational environment.
Ability to effectively organize, prioritize, multi-task and manage time.
Demonstrated accuracy and productivity in a changing environment with constant interruptions.
Demonstrated ability to analyze information, problems, issues, situations, and procedures to develop effective solutions.
Ability to exercise strict confidentiality in all matters.
Mobility
Primarily sedentary, able to sit for long periods of time.
Physical Requirements
Ability to see, speak, and hear other personnel and/or objects. Ability to communicate both in verbal and written form. Ability to travel within and around the facility or Work from Home (WFH) environment. Capable of using a telephone, computer keyboard, and mouse. Ability to lift up to 10 lbs.
Environmental Conditions
Work-from-home (WFH) environment.
American Specialty Health is an Equal Opportunity/Affirmative Action Employer.
All qualified applicants will receive consideration for employment without regard to sex (including pregnancy, childbirth, related medical conditions, breastfeeding, and reproductive health decision-making), gender, gender identity, gender expression, race, color, religion (including religious dress and grooming practices), creed, national origin, citizenship, ancestry, physical or mental disability, legally-protected medical condition, marital status, age, sexual orientation, genetic information, military or veteran status, political affiliation, or any other basis protected by applicable local, federal or state law.
Please view Equal Employment Opportunity Posters provided by OFCCP here.
If you are a qualified individual with a disability or a disabled veteran, you have the right to request an accommodation if you are unable or limited in your ability to use or access our career center as a result of your disability. To request an accommodation, contact our Human Resources Department at (800) 848-3555 x6702.
ASH will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the Company’s legal duty to furnish information.