Director, Privacy Officer

Blue Cross & Blue Shield of Rhode Island; Providence (RI); Hybrid; USD 133,000 - 213,000; Full time

Benefits offered by this job

Remote and hybrid options

Paid time off

Tuition reimbursement

Student-loan repayment assistance

Health insurance

Dental insurance

Vision insurance

Well-being programs

Bonuses and investment plans

Job summary

Blue Cross & Blue Shield of Rhode Island seeks a strategic Privacy Officer to lead our enterprise privacy program. You will advise on privacy obligations, regulatory developments, and material risks, directing governance, policies, and controls across the organization.

You will oversee investigations, risk monitoring, and remediation, coordinating with Legal, Compliance, IS, HR, and business leaders. Strong communication and leadership required.

Qualifications

• Bachelor’s degree or equivalent leadership experience in a related field
• Knowledge of state/federal confidentiality, privacy and security laws incl. HIPAA
• Ability to interpret federal/state health insurance regulations

Responsibilities

• Serve as Privacy Officer and SME on privacy. Advise on obligations, risks, and actions. Direct governance of the privacy program including policies and controls.
• Direct investigations of privacy incidents; coordinate with Legal, Compliance, IS, HR, and leadership; ensure remediation and reporting.

Skills

Privacy governance

HIPAA knowledge

Regulatory interpretation

Communication to leadership

Cross-functional collaboration

Education

Bachelor’s degree in Business Administration / Health Care Administration / Compliance / Law

Job description

Pay Range $133,300.00 - $213,300.00

At BCBSRI, our greatest resource is our people.

We come from varying backgrounds, different cultures, and unique experiences. We are hard-working, caring, and creative individuals who collaborate, support one another, and grow together. Passion, empathy, and understanding are at the forefront of everything we do—not just for our members, but for our employees as well.

We recognize that to do your best work, you have to be your best self.

It’s why we offer flexible work arrangements that include remote and hybrid opportunities and paid time off. We provide tuition reimbursement and assist with student-loan repayment. We offer health, dental, and vision insurance as well as programs that support your mental health and well-being. We pay competitively, offer bonuses and investment plans, and are committed to growing and developing our employees.

Our culture is one of belonging.

We strive to be transparent and accountable. We believe in equipping our associates with the knowledge and resources they need to be successful. No matter where you’re at in the organization, you’re an integral part of our team and your input, thoughts, and ideas are valued.

Join Others Who Value a Workplace For All.

We appreciate and celebrate everything that makes us unique, from personal characteristics to past experiences. Our different perspectives strengthen us as an organization and help us better serve all Rhode Islanders.

We’re dedicated to serving Rhode Islanders.

Our focus extends beyond providing access to high-quality, affordable, and equitable care. To further improve the health and well-being of our fellow Rhode Islanders, we regularly roll up our sleeves and get to work (literally) in communities all across the state—building homes, working in food pantries, revitalizing community centers, and transforming outdoor spaces for children and adults. Because we believe it is our collective responsibility to uplift our fellow Rhode Islanders when and where we can, our associates receive additional paid time to volunteer.

Why This Job Matters

Provide enterprise leadership and oversight for the organization’s privacy program. Serve as Privacy Officer and advisor on privacy risk, regulatory obligations, and emerging issues. Direct privacy governance, policies, controls, investigations, training, monitoring, and remediation to protect confidential information and ensure compliance with corporate, federal, and state privacy requirements.

What You Will Do

• Serve as Privacy Officer and enterprise subject matter expert on privacy. Advise on privacy obligations, regulatory developments, material risks, and recommended actions. Direct the development, implementation, and ongoing governance of the enterprise privacy program, including policies, procedures, and controls governing access to, use of, disclosure of, and accounting for PHI. Ensure privacy strategy and program priorities align with enterprise objectives and applicable corporate, federal, and state requirements.
• Direct investigations involving suspected privacy violations, complaints, and incidents. Determine escalation and remediation requirements; coordinate with Legal, Compliance, Information Security, Human Resources, and business leadership; ensure timely mitigation, documentation, trend analysis, and reporting of material matters.
• Oversee a risk-based privacy monitoring and audit program. Evaluate findings, require corrective action plans, monitor remediation, and elevate significant or recurring privacy risks.
• Provide guidance on privacy matters and maintain consistent application of privacy requirements across the organization.
• Set the enterprise strategy for privacy training, awareness, and education. Oversee development and delivery of programs, evaluate effectiveness, and ensure timely communication of regulatory and policy changes.
• Lead, coach, and develop privacy staff and cross-functional partners.
• Perform other duties as assigned.

What You Need To Succeed

• Bachelor’s degree in Business Administration, Health Care Administration, Compliance, Law, or a related field, or an equivalent combination of education and relevant leadership experience
• Knowledge of state and federal confidentiality, privacy and security laws and regulations, including but not limited to HIPAA and the Rhode Island Confidentiality of Health Care Communications and Information Act
• Knowledge of compliance and ethics principles
• Ability to interpret and understand federal and state health insurance regulations
• Ability to perform root cause analysis
• Ability to create and monitor corrective action plans
• Ability to develop and execute enterprise privacy strategy and translate regulatory requirements into business priorities, governance, controls, and measurable outcomes
• Ability to assess enterprise privacy risk, analyze trends and root causes, define meaningful metrics, and present clear recommendations to senior leadership
• Strong written and verbal communication skills, including the ability to communicate complex privacy matters to executive, board, regulatory, and operational audiences
• Ability to lead cross-functional teams and establish effective partnerships with Legal, Compliance, Information Security, Human Resources, Operations, and business leadership
• Strong organizing skills, with the ability to prioritize and respond to shifting deadlines
• Ability to manage competing enterprise priorities, and drive timely decisions and sustained accountability

The Extras

• Seven or more years of progressive experience in health care privacy, regulatory compliance, or a related field, including five or more years leading teams, programs, or complex enterprise initiatives Certified Information Privacy Professional (CIPP), Certified Information Privacy Manager (CIPM), or comparable privacy certification

Location:

BCBSRI is headquartered in downtown Providence, conveniently located near the train station and bus terminal. We actively support associate well-being and work/life balance and offer the following schedules, based on role:

Role

• In-office: onsite 5 days per week
• Hybrid: onsite 2-4 days per week
• Remote: onsite 0-1 days per week. Permitted to reside in the following states, pending approval from the Human Resources Department: Arizona, Connecticut, Florida, Georgia, Louisiana, Massachusetts, North Carolina, Oklahoma, Rhode Island, South Carolina, Texas, Virginia

Our culture of belonging at Blue Cross & Blue Shield of Rhode Island (BCBSRI) is at the core of all we do, and it strengthens our ability to meet the challenges of today’s healthcare industry. BCBSRI is an equal opportunity employer.

Please visitwww.eeoc.gov/know-your-rights-workplace-discrimination-illegal to view the "Know Your Rights" poster.