Pay Range:
$133,300.00 - $213,300.00
Please email if you are a candidate seeking a reasonable accommodation for the application and/or interview process.
Why this job matters:
Provide enterprise leadership and oversight for the organization’s privacy program. Serve as Privacy Officer and advisor on privacy risk, regulatory obligations, and emerging issues. Direct privacy governance, policies, controls, investigations, training, monitoring, and remediation to protect confidential information and ensure compliance with corporate, federal, and state privacy requirements.
What you will do:
- Serve as Privacy Officer and enterprise subject matter expert on privacy. Advise on privacy obligations, regulatory developments, material risks, and recommended actions. Direct the development, implementation, and ongoing governance of the enterprise privacy program, including policies, procedures, and controls governing access to, use of, disclosure of, and accounting for PHI. Ensure privacy strategy and program priorities align with enterprise objectives and applicable corporate, federal, and state requirements.
- Direct investigations involving suspected privacy violations, complaints, and incidents. Determine escalation and remediation requirements; coordinate with Legal, Compliance, Information Security, Human Resources, and business leadership; ensure timely mitigation, documentation, trend analysis, and reporting of material matters.
- Oversee a risk-based privacy monitoring and audit program. Evaluate findings, require corrective action plans, monitor remediation, and escalate significant or recurring privacy risks.
- Provide guidance on privacy matters and maintain consistent application of privacy requirements across the organization.
- Set the enterprise strategy for privacy training, awareness, and education. Oversee development and delivery of programs, evaluate effectiveness, and ensure timely communication of regulatory and policy changes.
- Lead, coach, and develop privacy staff and cross-functional partners.
- Perform other duties as assigned.
What you need to succeed:
- Bachelor’s degree in Business Administration, Health Care Administration, Compliance, Law, or a related field, or an equivalent combination of education and relevant leadership experience
- Knowledge of state and federal confidentiality, privacy and security laws and regulations, including but not limited to HIPAA and the Rhode Island Confidentiality of Health Care Communications and Information Act
- Knowledge of compliance and ethics principles
- Ability to interpret and understand federal and state health insurance regulations
- Ability to perform root cause analysis
- Ability to create and monitor corrective action plans
- Ability to develop and execute enterprise privacy strategy and translate regulatory requirements into business priorities, governance, controls, and measurable outcomes
- Ability to assess enterprise privacy risk, analyze trends and root causes, define meaningful metrics, and present clear recommendations to senior leadership
- Strong written and verbal communication skills, including the ability to communicate complex privacy matters to executive, board, regulatory, and operational audiences
- Ability to lead cross-functional teams and establish effective partnerships with Legal, Compliance, Information Security, Human Resources, Operations, and business leadership
- Strong organizing skills, with the ability to prioritize and respond to shifting deadlines
- Ability to manage competing enterprise priorities, and drive timely decisions and sustained accountability
The extras:
- Seven or more years of progressive experience in health care privacy, regulatory compliance, or a related field, including five or more years leading teams, programs, or complex enterprise initiatives Certified Information Privacy Professional (CIPP), Certified Information Privacy Manager (CIPM), or comparable privacy certification
Location:
BCBSRI is headquartered in downtown Providence, conveniently located near the train station and bus terminal. We actively support associate well-being and work/life balance and offer the following schedules, based on role:
- In-office: onsite 5 days per week
- Hybrid: onsite 2-4 days per week
- Remote: onsite 0-1 days per week. Permitted to reside in the following states, pending approval from the Human Resources Department: Arizona, Connecticut, Florida, Georgia, Louisiana, Massachusetts, North Carolina, Oklahoma, Rhode Island, South Carolina, Texas, Virginia
