Manager Privacy Office

About the role

This position is responsible for the day-to-day management of a team that analyzes, drafts, and negotiates various agreements to ensure HCSC complies with federal and state privacy regulations. The role involves managing staff supporting key privacy initiatives and projects, driving those initiatives, and analyzing privacy laws such as HIPAA to assess their impact on HCSC operations. The position collaborates with the HCSC Privacy Office and stakeholders across the organization to resolve complex privacy matters.

As a privacy subject matter expert, this role manages team members who negotiate with customers, vendors, and third parties, and may personally handle higher-priority agreements. The position also requires understanding the management of privacy and security incidents, investigations, mitigation, and corrective actions. It includes daily oversight of wholly owned subsidiary privacy compliance, development of operational privacy policies and procedures, breach notification, and digital privacy, with potential direct support in these areas.

Responsibilities

• Manage a team responsible for analyzing, drafting, and negotiating agreements to ensure compliance with privacy regulations.
• Drive key privacy initiatives and projects, assessing the impact of privacy laws (e.g., HIPAA) on HCSC operations.
• Collaborate with the HCSC Privacy Office and stakeholders to resolve complex privacy matters.
• Act as the privacy subject matter expert for high-priority agreements with customers, vendors, and third parties.
• Oversee the management of privacy and security incidents, investigations, mitigation, and corrective actions.
• Manage privacy compliance for wholly owned subsidiaries, including developing and overseeing operational policies, breach notification, and digital privacy.
• Guide and train others on interpreting and applying privacy laws and regulations.

Requirements

• Bachelor’s Degree and 6 years’ experience in healthcare, legal, privacy, or contracting; OR JD or MBA and 4 years of experience; OR 10 years of relevant experience.
• 2 years of direct supervision experience.
• Knowledge and experience interpreting state/federal laws, particularly in the healthcare industry.
• Proficiency in Microsoft Office (Word, Excel, Access, PowerPoint).
• Ability to work with highly sensitive and confidential information.
• Strong verbal and written communication skills, including interpersonal skills for cross-departmental collaboration.
• Excellent facilitation, organizational, integration, and presentation skills.

Preferred Qualifications

• Knowledge of managing healthcare privacy breaches and incidents.
• Experience with RadarFirst or similar compliance software.
• Six Sigma Black Belt certification or similar process improvement certification.
• HIPAA, Privacy, or Compliance certifications (e.g., CHP, CHC, CHPC, CIPP, PMP, LSS).

Pay

Compensation range: $92,700.00 - $167,500.00. Exact compensation may vary based on skills, experience, and location.