Experience: 12+ Years
Visa: L2, E2, TN, USC
Job Description:
Provide day-to-day guidance on HIPAA Privacy Rule compliance across operational changes, initiatives, and projects of varying size and complexity
Advise business, clinical, and IT teams on appropriate handling of protected health information (PHI) and privacy risk mitigation strategies
Review and provide input on project designs, workflows, and process changes to ensure alignment with HIPAA and organizational privacy requirements
Identify opportunities to streamline and operationalize privacy processes, reducing manual effort and improving consistency
Develop practical, scalable, and sustainable self-service tools, templates, and guidance for teams to independently address common privacy needs
Partner with Legal, Compliance, Security, and operational stakeholders to enable compliant and efficient execution of business priorities
Support interpretation and application of HIPAA requirements in real-world scenarios, balancing risk management with operational efficiency
Provide recommendations to enhance privacy governance, documentation, and standard operating procedures
Qualifications & Experience:
Demonstrated experience in HIPAA compliance, preferably in healthcare delivery, payer, or health services environment
Strong working knowledge of the HIPAA Privacy Rule and practical application in operations and project delivery
Experience advising cross-functional teams (e.g., clinical, IT, product, operations) on privacy requirements
Ability to translate regulatory requirements into actionable, business-friendly guidance
Preferred Certifications/Designations (any)
Certified in Healthcare Privacy Compliance (CHPC)-HCCA
Certified Information Privacy Professional (CIPP/US or CIPP/E)-IAPP
Certified Information Privacy Manager (CIPM)-IAPP