Director, Privacy Officer

Blue Cross & Blue Shield of Rhode Island; Providence (RI); Hybrid; USD 133,000 - 213,000; Full time

Job summary

Blue Cross & Blue Shield of Rhode Island seeks a Privacy Officer to lead the organization’s privacy program, advising on regulatory obligations and privacy risks. You will govern policies, controls for PHI, and coordinate investigations with Legal, Compliance, and Information Security.

The role requires strong communication skills, cross-functional leadership, and the ability to translate complex regulations into actionable business priorities within a hybrid workplace in Rhode Island.

Qualifications

• Bachelor’s degree in business administration, health care administration, compliance, law, or related field.
• Knowledge of HIPAA and Rhode Island confidentiality laws.
• Ability to translate regulatory requirements into business priorities with measurable outcomes.
• Strong written and verbal communication for executives and governance bodies.

Responsibilities

• Provide enterprise privacy leadership and governance for the organization’s privacy program.
• Advise on privacy obligations, regulatory developments, material risks, and recommended actions.
• Direct development and governance of privacy policies, procedures, and controls governing access to, use of, disclosure of, and accounting for PHI.
• Ensure privacy strategy and program priorities align with enterprise objectives and regulatory requirements.
• Direct investigations involving suspected privacy violations, complaints, and incidents.
• Lead privacy staff and cross-functional partners; develop training and awareness.

Skills

Cross-functional leadership

Privacy risk assessment

Regulatory interpretation

Communication skills

Project management

Education

Bachelor’s degree in Business Administration, Health Care Administration, Compliance, Law, or related field

Job description

Pay Range: $133,300.00 - $213,300.00 Please email [e-mail] if you are a candidate seeking a reasonable accommodation for the application and/or interview process.

At BCBSRI, our greatest resource is our people. We come from varying backgrounds, different cultures, and unique experiences. We are hard-working, caring, and creative individuals who collaborate, support one another, and grow together. Passion, empathy, and understanding are at the forefront of everything we do—not just for our members, but for our employees as well. We recognize that to do your best work, you have to be your best self. It’s why we offer flexible work arrangements that include remote and hybrid opportunities and paid time off. We provide tuition reimbursement and assist with student-loan repayment. We offer health, dental, and vision insurance as well as programs that support your mental health and well-being.

We pay competitively, offer bonuses and investment plans, and are committed to growing and developing our employees. Our culture is one of belonging. We strive to be transparent and accountable. We believe in equipping our associates with the knowledge and resources they need to be successful. No matter where you’re at in the organization, you’re an integral part of our team and your input, thoughts, and ideas are valued. Join others who value a workplace for all. We appreciate and celebrate everything that makes us unique, from personal characteristics to past experiences. Our different perspectives strengthen us as an organization and help us better serve all Rhode Islanders. We’re dedicated to serving Rhode Islanders.

Our focus extends beyond providing access to high-quality, affordable, and equitable care. To further improve the health and well-being of our fellow Rhode Islanders, we regularly roll up our sleeves and get to work (literally) in communities all across the state—building homes, working in food pantries, revitalizing community centers, and transforming outdoor spaces for children and adults. Because we believe it is our collective responsibility to uplift our fellow Rhode Islanders when and where we can, our associates receive additional paid time to volunteer.

Why this job matters:

Provide enterprise leadership and oversight for the organization’s privacy program. Serve as Privacy Officer and advisor on privacy risk, regulatory obligations, and emerging issues. Direct privacy governance, policies, controls, investigations, training, monitoring, and remediation to protect confidential information and ensure compliance with corporate, federal, and state privacy requirements.

What you will do:

• Serve as Privacy Officer and enterprise subject matter expert on privacy.
• Advise on privacy obligations, regulatory developments, material risks, and recommended actions.
• Direct the development, implementation, and ongoing governance of the enterprise privacy program, including policies, procedures, and controls governing access to, use of, disclosure of, and accounting for PHI.
• Ensure privacy strategy and program priorities align with enterprise objectives and applicable corporate, federal, and state requirements.
• Direct investigations involving suspected privacy violations, complaints, and incidents.
• Determine escalation and remediation requirements; coordinate with Legal, Compliance, Information Security, Human Resources, and business leadership; ensure timely mitigation, documentation, trend analysis, and reporting of material matters.
• Oversee a risk-based privacy monitoring and audit program.
• Evaluate findings, require corrective action plans, monitor remediation, and elevate significant or recurring privacy risks.
• Provide guidance on privacy matters and maintain consistent application of privacy requirements across the organization.
• Set the enterprise strategy for privacy training, awareness, and education.
• Oversee development and delivery of programs, evaluate effectiveness, and ensure timely communication of regulatory and policy changes.
• Lead, coach, and develop privacy staff and cross-functional partners.
• Perform other duties as assigned.

What you need to succeed:

• Bachelor’s degree in Business Administration, Health Care Administration, Compliance, Law, or a related field, or an equivalent combination of education and relevant leadership experience.
• Knowledge of state and federal confidentiality, privacy and security laws and regulations, including but not limited to HIPAA and the Rhode Island Confidentiality of Health Care Communications and Information Act.
• Knowledge of compliance and ethics principles.
• Ability to interpret and understand federal and state health insurance regulations.
• Ability to perform root cause analysis.
• Ability to create and monitor corrective action plans.
• Ability to develop and execute enterprise privacy strategy and translate regulatory requirements into business priorities, governance, controls, and measurable outcomes.
• Ability to assess enterprise privacy risk, analyze trends and root causes, define meaningful metrics, and present clear recommendations to senior leadership.
• Strong written and verbal communication skills, including the ability to communicate complex privacy matters to executive, board, regulatory, and operational audiences.
• Ability to lead cross-functional teams and establish effective partnerships with Legal, Compliance, Information Security, Human Resources, Operations, and business leadership.
• Strong organizing skills, with the ability to prioritize and respond to shifting deadlines.
• Ability to manage competing enterprise priorities, and drive timely decisions and sustained accountability.

The extras:

• Seven or more years of progressive experience in health care privacy, regulatory compliance, or a related field, including five or more years leading teams, programs, or complex enterprise initiatives.
• Certified Information Privacy Professional (CIPP), Certified Information Privacy Manager (CIPM), or comparable privacy certification.

Location:

BCBSRI is headquartered in downtown Providence, conveniently located near the train station and bus terminal.

• In-office: onsite 5 days per week
• Hybrid: onsite 2-4 days per week
• Remote: onsite 0-1 days per week

Permitted to reside in the following states, pending approval from the Human Resources Department: Arizona, Connecticut, Florida, Georgia, Louisiana, Massachusetts, North Carolina, Oklahoma, Rhode Island, South Carolina, Texas, Virginia.

BCBSRI is an equal opportunity employer.

The law requires an employer to post notices describing the Federal laws. Please visit www.eeoc.gov/know-your-rights-workplace-discrimination-illegal to view the "Know Your Rights" poster.