Privacy Analyst

Thank you for considering a career at Ensemble!
Ensemble is a leading provider of technology-enabled revenue cycle management solutions for health systems, including hospitals and affiliated physician groups. They offer end-to-end revenue cycle solutions as well as a comprehensive suite of point solutions to clients across the country.
Ensemble keeps communities healthy by keeping hospitals healthy. We recognize that healthcare requires a human touch, and we believe that every touch should be meaningful. This is why our people are the most important part of who we are. By empowering them to challenge the status quo, we know they will be the difference!
O.N.E Purpose:
Customer Obsession: Consistently provide exceptional experiences for our clients, patients, and colleagues by understanding their needs and exceeding their expectations.
Embracing New Ideas: Continuously innovate by embracing emerging technology and fostering a culture of creativity and experimentation.
Striving for Excellence: Execute at a high level by demonstrating our “Best in KLAS” Ensemble Difference Principles and consistently delivering outstanding results.
The Opportunity:
CAREER OPPORTUNITY OFFERING:
Bonus Incentives
Paid Certifications
Tuition Reimbursement
Comprehensive Benefits
Career Advancement
This position pays $63,100 – $94,650 based on experience
Ensemble Health Partners is seeking a Privacy Analyst to join the Privacy Department. This role is designed as a core privacy position focused on supporting privacy operations, incident review, compliance monitoring, and program administration across a complex healthcare environment.
The Privacy Analyst will help review privacy incidents, maintain documentation, support privacy risk analyses, and contribute to policy and training updates. The role offers broad exposure to HIPAA, healthcare operations, data governance, and the practical application of privacy requirements in a fast-moving, technology-enabled business setting.
This position is especially well suited for candidates who are intellectually curious, analytical, and highly comfortable with technology. We welcome applicants who enjoy learning new systems quickly, working with data, understanding how digital tools shape business operations, and exploring how AI-enabled solutions can be used responsibly to solve real problems.
Key Responsibilities:
Privacy Investigations:
Support investigations of suspected privacy incidents and breaches involving protected health information and other sensitive data under the direction of senior team members.
Gather facts, review available records, and coordinate with business partners to help determine scope, root cause, and required follow-up actions.
Assist with incident documentation, client support materials, and internal communications related to privacy matters, with senior review for complex issues.
Maintain investigation records, evidence, and the privacy incident log in accordance with retention requirements.
Identify patterns and recurring issues from incidents, including those involving new technologies or process gaps, and escalate trends to senior team members.
Privacy Operations & Data Risk Support:
Support day-to-day privacy operations, including privacy reviews, documentation, issue tracking, and follow-up activities across the organization.
Assist with privacy risk analyses involving sensitive data, business processes, and new or changing technologies.
Review data flows, system use cases, and operational activities to help identify privacy risks and escalation needs.
Help maintain privacy logs, intake records, issue trackers, and program documentation with a high degree of accuracy and organization.
Contribute to reviews involving digital tools, workflow automation, analytics platforms, and AI-enabled solutions to help ensure privacy requirements are considered early in the design and implementation process.
Monitor regulatory, industry, and technology developments and summarize practical implications for the privacy team.
Support the continuous improvement of templates, workflows, trackers, and checklists used in privacy operations and governance activities, with an eye toward efficiency, usability, and scalability.
Program Support:
Contribute to privacy policies, standards, training materials, and internal guidance documents.
Support privacy risk assessments, audits, monitoring activities, and regulatory response preparation.
Track metrics and help prepare reports, dashboards, and status updates that turn privacy activity into useful insights for leaders and business partners.
Required Qualifications:
Bachelor's degree, or equivalent combination of education and relevant experience.
2–4 years of professional experience in privacy, compliance, healthcare operations, information governance, information security, risk, or a related analytical, operations, or technology-focused role.
Working knowledge of privacy principles, data handling expectations, and risk awareness in regulated or data-intensive environments.
Demonstrated ability to produce clear, organized written documentation such as case notes, issue summaries, policy drafts, reports, or research findings.
Strong written and verbal communication skills, including the ability to explain technical or regulatory topics to non-technical audiences.
Sound judgment, discretion, and the ability to handle sensitive information.
Interest in professional development and willingness to pursue privacy certification such as CIPP/US, CIPM, CHPC, or related credentials.
Experience We Love:
Experience with HIPAA Privacy compliance in a hospital, health system, or other regulated healthcare setting.
Experience supporting healthcare compliance, privacy investigations, audit, security, data governance, or other work requiring strong critical thinking and organization.
Strong digital fluency and comfort using modern workplace tools, case-management systems, spreadsheets, dashboards, or data analysis tools.
Curiosity about emerging technology and interest in how AI, automation, and data-driven tools can be used responsibly in healthcare and business operations.
Experience reviewing operational workflows, business processes, or data practices to identify risks and recommend practical next steps.
Relevant certifications, coursework, internships, or project work in privacy, cybersecurity, data governance, analytics, health informatics, or responsible AI.
Must be inquisitive and demonstrate openness to innovation including AI to explore better processes and ways to alleviate friction and improve patient and client experiences.
This is a remote position; however, candidates must be willing and able to travel to and work onsite at client, temporary, or corporate office locations as business needs require.
Success in This Role Looks Like
First 6 months —  Learning Ensemble's privacy workflows, tools, and business environment; supporting investigations and routine privacy work; building familiarity with healthcare data, issue tracking, and core compliance processes.
6–12 months —  Handling standard privacy analyst responsibilities with increasing independence; contributing to risk reviews, reporting, policy and training updates, and process improvements; becoming a dependable resource for privacy operations and technology-related questions.
12–24 months —  Operating confidently as a high-performing Privacy Analyst, helping improve team processes, supporting more complex issues, and building a strong foundation for growth into senior privacy, compliance, governance, data risk, or responsible AI roles.
Why This Role Matters
This role matters because strong privacy programs need people who can combine sound judgment, attention to detail, and confidence with modern technology. The Privacy Analyst will help protect sensitive information, support responsible innovation, and improve the systems and workflows that make a complex healthcare business run well. For