Responsibilities

Run a HIPAA risk assessment on the app: where patient data is collected, stored and sent, and who can see it.

Turn the Security Rule safeguards into a requirements checklist for the developer: access controls, unique user IDs, encryption at rest and in transit, audit logs, automatic logoff, backup and recovery.

Check that each vendor (hosting, email, SMS, analytics) is HIPAA-eligible and will sign a business associate agreement (BAA).

Write the policies and procedures: access, incident response, breach notification, data retention, workforce training.

Keep a compliance record for audits: risk register, safeguard matrix, evidence log.

Review each release against the checklist before it goes live.

Requirements

3+ years in healthcare IT compliance or health-tech, with hands-on Security Rule work.

Working knowledge of cloud setups that meet HIPAA (AWS, Azure or GCP).

Has written risk assessments and policies before.

Nice to have: CHPS, CHPC, CIPP/US or HCISPP certification.

US Shift

Salary - 30-32k

📌 Healthcare IT Compliance Analyst (India)
🏢 Clerk-Tech
📍 India