Privacy Manager

About the Role

The Privacy Manager supports and advances the MUSC Health Privacy Program through oversight of day-to-day privacy operations, regulatory activities, and privacy initiatives. This role collaborates with teams across the enterprise, including Health Information Management, Information Security, Legal, Human Resources, Compliance, and Clinical Operations, to strengthen organizational privacy practices.

Responsibilities

• Serve as a subject matter expert on HIPAA and other state/federal privacy requirements.
• Supervise, mentor, and support one or more privacy team members, as assigned.
• Monitor regulatory and industry developments impacting privacy compliance.
• Oversee privacy investigations, breach assessments, and regulatory reporting requirements.
• Assist with the development, implementation, and ongoing maintenance of system-wide privacy policies, procedures, and standards.
• Participate in enterprise governance committees.
• Conduct regular privacy audits and investigations to identify potential privacy risks and mitigation strategies.
• Respond to privacy-related inquiries, incidents, and escalations in a timely and effective manner.
• Assist the Director of Privacy with all other duties as assigned.

Requirements

• Bachelor’s degree and five years of related experience, or an internal candidate with a high school diploma and at least seven years of related experience.
• Certified in Healthcare Privacy Compliance (CHPC) required upon hire or within six months of employment.
• Certified Information Privacy Professional/United States (CIPP/US) certification is preferred.
• Seven years of progressive work experience and two years of management experience.

Skills

• Knowledge of HIPAA, HITECH, and other applicable state and federal privacy regulations and industry standards.
• Experience conducting privacy investigations, breach risk assessments, incident response activities, and regulatory reporting.
• Strong problem-solving and critical-thinking skills with exceptional attention to detail.
• Ability to manage multiple priorities while maintaining strict confidentiality.
• Excellent organizational skills and flexibility to operate in a dynamic, fast-paced healthcare environment.
• Strong written and verbal communication skills, including the ability to develop and deliver presentations, educational programs, and live training.
• Ability to build collaborative relationships and effectively lead meetings, work groups, and cross-functional initiatives.
• Ability to interpret regulatory requirements and translate them into practical operational guidance, policies, and procedures.

Additional Information

This position requires the ability to independently manage a broad range of responsibilities and respond effectively to competing priorities in a complex healthcare environment. The role is based in South Carolina and requires occasional travel to MUSC Health facilities and affiliated sites throughout the enterprise.

Entity: Medical University Hospital Authority (MUHA). Cost Center: CC002278 SYS - Compliance Program. Scheduled weekly hours: 40.