Job Description

The University of South Florida is a top-ranked research university serving approximately 50,000 students from across the globe at campuses in Tampa, St. Petersburg, and USF Health. In 2025, U.S. News & World Report recognized USF with its highest overall ranking in university history, as a top 50 public university for the seventh consecutive year and as one of the top 15 best values among all public universities in the nation. U.S. News also ranks the USF Health Morsani College of Medicine in the highest tier, placing it as one of the top 16 medical schools in the nation and inside the top 10 among public universities. USF is a member of the Association of American Universities (AAU), a group that includes only the top 3% of universities in the U.S. With an all-time high of $750 million in research funding in 2025 and as a top 20 public university for producing U.S. patents, USF uses innovation to transform lives and shape a better future. The university generates an annual economic impact of nearly $10 billion for the state of Florida. USF’s Division I athletics teams compete in the American Conference. Learn more at www.usf.edu.

The HIPAA Privacy Investigator & Operations Administrator, within the Office of Compliance and Ethics, is responsible for overseeing privacy compliance activities, investigating potential HIPAA violations, and supporting privacy office operational functions that ensure efficient, compliant, and effective organizational performance. This role serves as a key liaison between privacy, leadership, staff, and external stakeholders to protect patient information while optimizing operational processes.

HIPAA Privacy Investigation

Conduct investigations into alleged privacy breaches, unauthorized disclosures, and violations involving protected health information (PHI)

Analyze incidents, interview involved parties, review documentation, and determine findings

Prepare detailed investigative reports, corrective action recommendations, and executive summaries

Monitor compliance with HIPAA Privacy, Security, and Breach Notification Rules

Coordinate breach risk assessments and support breach notification activities when required

Maintain investigation records and documentation in accordance with regulatory requirements

Develop and deliver privacy training and awareness programs for employees

Monitor emerging healthcare privacy regulations and recommend policy updates

Collaborate with legal counsel, compliance officers, human resources, and department leaders regarding privacy matters

Operations Administration

Coordinate daily operational activities to support organizational and privacy office objectives and regulatory compliance

Develop, implement, and maintain policies, procedures, and workflows

Monitor and track privacy incidents and projects and prepare reports for leadership

Support contract administration, vendor management, and departmental budgeting processes

Facilitate process improvement initiatives to enhance efficiency and service quality

Coordinate meetings, project plans, and cross-functional operational initiatives

Maintain operational records, databases, and compliance documentation

Support employee onboarding, training coordination, and policy implementation activities

Ensure adherence to organizational policies, and applicable regulations

Minimum:

• This position requires an Associate’s Degree or equivalent and two (2) years of experience involving federal or state privacy laws, other legal field experience or work requiring access to an electronic medical record. College or other relevant post-secondary coursework may substitute for the experience requirement on a year for year basis.
• Within 12 months of hire, applicant will be required to be certified in Healthcare Privacy Compliance (CHPC).

Degree Equivalency Clause: Four years of direct experience for a bachelor’s degree.

• Senate Bill 1310- The Florida Senate (https://www.flsenate.gov/Session/Bill/2023/1310) is conditional upon meeting all employment eligibility requirements in the U.S.
• SB 1310: Substitution of Work Experience for Postsecondary Education Requirements
• A public employer may include a postsecondary degree as a baseline requirement only as an alternative to the number of years of direct experience required, not to exceed:
• (a) Two years of direct experience for an associate degree;
• (b) Four years of direct experience for a bachelor’s degree;
• (c) Six years of direct experience for a master’s degree;
• (d) Seven years of direct experience for a professional degree; or
• (e) Nine years of direct experience for a doctoral degree
• Related work experience may not substitute for any required licensure, certification, or registration required for the position of employment as established by the public employer and indicated in the advertised description of the position of employment.
• Minimum Qualifications that require a high school diploma are exempt from SB 1310.

Preferred:

Bachelor's degree in Healthcare Administration, Health Information Management, Business Administration, Public Administration, Compliance, or a related field

Minimum 1-3 years of experience in HIPAA compliance, privacy investigations, healthcare operations, or related areas

Strong knowledge of HIPAA regulations, healthcare privacy requirements, and compliance frameworks

Experience conducting investigations, root-cause analyses, and corrective action planning

Excellent written and verbal communication skills

Strong analytical, organizational, and problem-solving abilities

Proficiency with Microsoft Office Suite and compliance or case-management systems

Experience working with an electronic medical record