HIPAA Privacy Manager

Job Summary

To enable the Legal and Compliance team, the full-time remote Privacy Manager will conduct privacy impact assessments, manage incident triage and investigations, and ensure vendor compliance with patient data regulations, leveraging expertise in HIPAA and healthcare privacy laws.

Key responsibilities

• Conduct privacy impact assessments and manage the lifecycle of privacy incidents or breaches
• Ensure vendor practices align with patient data protection regulations
• Collaborate with product, engineering, and clinical teams to translate regulatory requirements into actionable workflows

Required qualifications

• 5+ years of compliance and data privacy experience, with 2-3 years in a healthcare environment subject to HIPAA/HITECH regulations
• Hands-on experience with Privacy Impact Assessments and managing privacy incidents
• Strong knowledge of HIPAA, HITECH, and state medical privacy regulations
• Experience collaborating with Information Security or IT teams on risk tracking and security incidents
• Proven ability to build or improve privacy operational processes within a healthcare setting