Lead Privacy Compliance Analyst
Core
Establishes and maintains privacy governance, compliance controls, and incident response processes for protected health information (PHI) and personally identifiable information (PII) across the Blue Cross Blue Shield Association.
Role type
Lead Privacy Compliance Analyst
Builds
Formal privacy program, policies, standards, procedures, and incident response plans (SWIRG)
Domain
Healthcare / Privacy & Information Security
Required skills
Privacy program management, HIPAA compliance, Incident response, Third-party risk management, GRC technology, Data loss prevention, Regulatory audit, Policy development
Preferred skills
AI literacy, Generative AI tools understanding, MBA, Master's degree
Technologies
Archer, Open Pages
Responsibilities
Develop and maintain privacy governance and compliance controls; Establish processes to identify gaps in privacy controls via audits; Develop and maintain privacy training programs; Provide oversight for de-identification, masking, and encryption of PHI/PII; Maintain System-wide Incident Response Guidance and Privacy Response Plan; Collaborate on third-party vendor compliance and audits.
Seniority
Senior, hands-on IC