Privacy Incident Analyst (Operations and Policy Analyst 1) Hybrid work options

Initial Posting Date:

11/06/2024

Application Deadline:

11/13/2024

Agency:

Oregon Health Authority

Salary Range:

$4,138 - $6,322

Position Type:

Employee

Position Title:

Privacy Incident Analyst (Operations and Policy Analyst 1) Hybrid work options

Job Description:

Monthly Salary Range: $4,425 - $6,322   

Salary will be determined via a Pay Equity Analysis, for more information on this

process please click here  

Please attach a current version of your resume and a cover letter that addresses the points listed under the section titled What We Are Looking For.

PLEASE NOTE: Resumes, cover letters and all other documents must all be uploaded at one time. When uploading a resume, please upload any other documents in the same area/field.

Applications without complete Workday applications, a resume and cover letter will be removed from consideration.

The Oregon Health Authority (OHA) has a fantastic opportunity for an experienced Privacy Incident Analyst to join an excellent team and work to advance their IT operations. 

The Office of Information Service’s mission is to deliver technology solutions and services that support Oregon Health Authority and Oregon Department of Human Services in helping Oregonians achieve health, well-being, and independence.

More information about the Office of Information Services and current job opportunities can be found here 

The Oregon Health Authority is committed to:

• Eliminating health inequities in Oregon by 2030
• Becoming an anti-racist organization
• Developing and promoting culturally and linguistically appropriate programs,
• Developing and retaining a diverse, inclusive, and equitable workforce that represents the diversity, cultures, strengths, and values of the people of Oregon.
• Click hereto learn more about OHA’s mission, vision, and core values.

This is a full-time permanent opportunity for anyone to apply. This position is a classified position represented by a union.

This position falls under the Operations & Policy Analyst 1 classification.

What you will do!

As a Privacy Incident Analyst, you will support the Information Security and Privacy Office (ISPO) case management and coordination of agency and contractor privacy incidents reported through agency reporting tools.

In this role, you will be responsible for working with a team on all privacy related events and incidents.  This will include Privacy Compliance Officer (PCO)/Privacy Manager and Privacy Coordinator (PC). Additionally,  may include assisting in the drafting of Agency-wide policies, notices, forms, and processes; the mapping of ISPO processes and the development of office performance measures including but not limited to the following:

• Evaluate privacy risk to ISPO and Agency-wide systems and operations.
• Research ISPO, and Agency operations in accordance with federal and state requirements and provide information to the IT Director for ISPO and the PCO on which the IT Director and the PCO can base policy or operational decisions.
• Provide programs, agencies, and partners resources to support data protections for Oregonians data through privacy consult and data integrity guidance.

What we are looking for:

(Please clearly outline how you meet the minimum requirements and special qualifications in your application/resume/cover letter. Failure to do so will disqualify you from consideration)

SPECIAL QUALIFICATIONS: Must have 1 + years of experience as it relates to privacy investigations (such as HIPAA, CMS, NIST Privacy Framework, OCR breach reporting and/or other federal and state investigation experience).

MINIMUM QUALIFICATIONS:

a) A bachelor’s degree in business or public administration, Healthcare Management, Behavioral or Social Sciences, Finance, Political Science, or any degree demonstrating the capacity for the knowledge and skills

OR

b) Any combination of experience and education equivalent to three technical-level experience as it relates to privacy investigations (such as HIPAA, CMS, NIST Privacy Framework, OCR breach reporting and/or other federal and state investigation experience) that typically supports the knowledge and skills for the classification.

Desired Attributes

• Demonstrable skill in privacy and risk evaluation of confidential information.
• Ability to appreciate the balance of risks with the overall business and agency objectives and program mission and work effectively and efficiently to support privacy safeguards.
• Experienced and knowledgeable in documenting and investigating privacy events and incidents. 
• Knowledge and understanding of privacy frameworks including NIST and other best practices.
• Knowledge and experienced in communicating with agency management, community partners and contractors including the development of communications related to privacy reports and notifications.
• Ability to support multiple projects and competing agency priorities.
• Strong PC skills (Microsoft Suite, Excel, Outlook, PowerPoint)
• Excellent written and verbal communication and presentation skills.
• Experience in creating and maintaining a work environment that is respectful and accepting of diversity among team members and the people we serve.

What's in it for you?

• Medical, vision, and dental benefits
• 11 paid holidays
• 8 hours of vacation per month, eligible to be used after 6 months of service.
• 8 hours of sick leave per month, eligible to be used as accrued.
• 24 hours of personal business leave per fiscal year, eligible to be used after 6 months of service.
• Pension and retirement programs 
• Opportunity to potentially receive loan forgiveness under the Public Service Loan Forgiveness Program (PSLF)
• Continuous growth and development opportunities
• Opportunities to serve your community and make an impact through meaningful work.

How to Apply

• Complete the online application.
• Complete questionnaire
• Attach a resume.
• Attach a cover letter of no more than two pages addressing the “What we are looking for?” section including required and preferred skills.

Working Conditions:

Working conditions are those of a general office environment in a close-knit, team-oriented environment. Weekend and evening work may be necessary to meet customer demands. Deadlines and department requirements may create stressful situations. This position requires the ability to work on multiple tasks simultaneously and within short time frames and interface effectively with customers. Driver’s license with acceptable driving record, or an ability to provide alternative means of transportation.

This position involves frequent contact with executives, management, and staff both internal and external to the organization. It requires working with a variety of people and situations, which requires the incumbent to exercise diplomacy. Confidentiality of information must be maintained at all times. Often travel to meetings is required with some travel to trainings. There can be frequent interruptions, demanding timeframes, and non-traditional working hours. The location of this position is in an office, cubicle and/or an agreed upon remote work environment with significant use of a computer and video conferencing.

Help Your Application Rise to the Top!

Your candidate profile and resume are the perfect opportunity to highlight your interest in the position and showcase the amazing skills and experience, making you the best candidate for the position. Submissions will be screened for consistency of information and communication skills at the professional level (attention to detail, spelling, grammar, etc.).

• This posting closes at 11:59 PM on the close date listed.
• Workday will timeout after 15 minutes of inactivity.
• Workday performs best in Google Chrome.
• You must have a valid email address to apply.
• Check both your email and Workday account for updates regarding this recruitment.
• Please print or save a copy of this announcement. You will not have access to it once the posting closes.
• Click here for Resources and a Job Support Page. 

Please ensure you’ve provided a thorough and updated application as it pertains to the position for which you are applying. If you meet the minimum qualifications for the position, and are the successful candidate, you may qualify for work out of class. For further information, please visit the Pay Equity Project homepage.

Questions/Need Help?

If you need assistance to participate in the application process including an accommodation request under the American with Disabilities Act, please call or email Kyle Phillips

Voice: [503-509-3589]

Email: Kyle.Phillips@dhsoha.state.or.us

TTY users please use the Oregon Telecommunications Relay Service: 1-800-735-2900. For technical support, please call toll free 1-855-524-5627, for customer service assistance. 

Additional Information

• Please monitor your Workday account to view all communication regarding your application. You must have a valid e-mail address to apply.
• PERS rate: The salary listed is the non-PERS qualifying salary range. If the successful candidate is PERS qualifying, the salary range will reflect an additional 6.95%. Please review the Classification and Compensation page for more details.
• CJIS Background Check:  The position you are applying for requires access to Criminal Justice Information (CJI) and therefore you must obtain CJIS clearance for unescorted access to a facility or system under the policy requirements set forth by the Federal Bureau of Investigation (FBI). The CJIS background check will be conducted by the Oregon State Police for the Federal Government and is initiated by the hiring manager in coordination with our ODHS/OHA CJIS Coordinators in our Background Check Unit. 
• If you are offered employment, your offer will be contingent upon the successful completion of two separate background checks. The first background check is an abuse check, criminal records check and driving records check. The second background check is the Criminal Justice Information Systems (CJIS) nation-wide FBI fingerprint-based background check. To be eligible for employment, you must pass both background checks and pass the CJIS training and testing requirements.
• Based on requirements under IRS Publication 1075, the tax information guidelines for Federal, State and local agencies, and Federal Criminal Justice Information Services (CJIS) Security Policy, all applicable Oregon Health Authority employees who use, or have physical or logical access to Criminal Justice Information (CJI), or Federal Tax Information (FTI), including current and future employees, will need to be fingerprinted, have a background check, and successfully complete related security training(s).  Employees with access to FTI will need to be fingerprinted and complete a background check every five (5) years.
• For more information on CJIS processes please visit the OSP CJIS Division webpage at https://www.oregon.gov/osp/programs/cjis/Pages/default.aspx If you have further questions regarding the CJIS policy please contact OSP at 503-378-3070. The FBI CJIS Security Policy Version 5.9, section 5.12.1, outlining the CJIS screening requirements, can be found at https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center
• Veterans: If you are a veteran, you may receive veteran’s preference. Click here for more information about veterans’ preference. To receive veterans' preference points, please submit the following required documentation when you apply:
  • A copy of your DD214/DD215 form; OR a letter from the US Dept. of Veterans Affairs indicating you receive a non-service-connected pension for the five (5) point preference.
  • A copy of your DD214/DD215 form; AND a copy of your veterans' disability preference letter from the Dept. of Veterans Affairs for the ten (10) point preference.
• Visa Sponsorship: Oregon Health Authority (OHA) does not offer VISA sponsorship. Within three days of hire, you will be required to complete the US Department of Homeland Security’s I-9 form confirming authorization to work in the United States.  OHA is an E-Verify employer and will use E-Verify to confirm that hires are authorized to work in the United States.
• Internal Applicants: Attention current State of Oregon employees: To apply for posted positions, please close this window, and log into your Workday account and apply through the Career worklet.
• Please attach only the documents that are related to the position. Additional documents that are attached will not be reviewed.
• Applicant Help and Support webpage

Affirmative Action and Equal Opportunity

The Oregon Health Authority is an affirmative action and equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, gender expression, national origin, age, protected veteran or disabled status, genetic information, or any other protected class under state or federal law. In addition, we do not discriminate, or screen applicants based on current or past compensation. To learn more about OHA’s mission, vision, and core values, click here.

The Oregon Health Authority is an equal opportunity, affirmative action employer committed to workforce diversity.

OHAAOOIS