Privacy Investigator

The Privacy Investigator leads investigations into routine and complex privacy incidents, partnering closely with Legal, Cybersecurity, Sales Account Management, and other business stakeholders to ensure timely analysis and effective remediation. This role analyzes investigation data to identify root causes, trends, and privacy risks, and conducts risk assessments, breach determinations, and notification activities in accordance with HIPAA, applicable state laws, and client contractual obligations.

The Privacy Investigator prepares required reporting for clients, regulatory agencies, and internal governance committees, presents investigation findings to leadership, and supports ongoing process improvement. This role also ensures strict adherence to confidentiality, security, and organizational privacy policies.

Responsibilities:

• Conducts privacy-related investigations, initiating appropriate actions to ensure privacy issues and incidents are analyzed thoroughly, efficiently, and in accordance with company policies and guidelines.
• Manages breach determination and notification processes under HIPAA, applicable state rules and laws, and contractual obligations.
• Analyzes investigation data to identify root causes and privacy risk trends; partners with key stakeholders to implement effective corrective actions.
• Maintains chain of custody on all documents, ensuring adherence to all confidentiality and security guidelines.
• Partners with key business areas to fully remediate each privacy event; renders advice and provides guidance based on investigation findings and analysis.
• Presents results of investigations to key business stakeholders and leaders.
• Ensures proper governance by escalating privacy related themes or sensitive findings to People Leader.
• Prepares required breach reporting submissions to regulatory agencies, oversight committees, and the Board Audit Committee.
• Evaluates current processes and identifies ongoing improvement opportunities.
• Respond to member requests related to their rights regarding protected health information (PHI) and personally identifiable information (PII).

• 2 or more years of experience in healthcare privacy, investigations, compliance, or a related regulatory role.
• Bachelor's degree in Healthcare Administration, Legal Studies, or a related field.
• Certified in Healthcare Privacy Compliance (CHC) preferred; CIPP/US or other relevant privacy certifications preferred.
• Strong knowledge of healthcare privacy laws and regulations, including HIPAA, HITECH, state data breach laws, and state insurance data security laws.
• Ability to interpret and apply regulatory requirements in real-world situations and explain complex privacy concepts to non-technical audiences.
• Strong analytical, critical thinking, investigative, research, and problem-solving skills, including the ability to recognize patterns and analyze data and facts.
• Experience leading cross-functional investigations with Legal, Cybersecurity, IT, Human Resources, and operational partners.
• Strong organizational, prioritization, and record-management skills with attention to detail and the ability to maintain accurate records and case files.
• High personal integrity and ethical standards when handling confidential and sensitive information.
• Comfortable leading meetings, interviews, and discussions with excellent written, verbal, and interpersonal communication skills.
• Ability to work effectively under pressure in fast-paced environments.

• Competitive base and incentive pay
• 401(k) with robust matching and non-matching contributions
• Rich medical & pharmacy benefits
• 100% employer-paid dental and vision benefits
• Holistic wellbeing program with deep financial incentives
• Generous paid time off plus 12 paid holidays and your birthday off
• Culture of growth and learning: career development; tuition reimbursement; recognition program
• Family support: adoption assistance, fertility treatment, child, elder & pet care assistance
• Social responsibility and volunteer opportunities
• Employee discount program