Entity Privacy Officer

Partner's Healthcare; Somerville (MA); Híbrido; USD 110.000 - 170.000; Jornada completa

Descripción de la vacante

Mass General Brigham is seeking an experienced Privacy Officer to serve as the primary privacy advisor for Community Hospitals. The role partners with hospital leadership, HIM, Compliance, Legal, and IT to ensure HIPAA and state privacy law compliance across the network.

The position requires strong incident management, policy development, and cross-functional collaboration. Hybrid schedule with onsite 1x/week and 40 hours per week is expected.

Formación

• Bachelor's degree in a related field required.
• 5+ years of privacy or health information leadership in a complex healthcare system.
• Experience leading investigations of privacy incidents and HIPAA violations.
• Strong ability to translate regulations into operational practice.

Responsabilidades

• Serve as Privacy Officer for assigned Community Hospitals.
• Lead investigations of privacy incidents and HIPAA violations.
• Document, manage, and track incidents through enterprise systems.
• Coordinate corrective actions and follow-up activities.
• Partner with operational, clinical, compliance, and information security teams.
• Monitor privacy risks and identify opportunities for process improvement.
• Develop guidance, workflows, and procedures to support compliance.
• Educate workforce on privacy practices and awareness.

Conocimientos

Privacy compliance

Regulatory knowledge

Leadership

Incident management

Stakeholder collaboration

Educación

Bachelor's Degree in related field

Herramientas

Case management systems

Descripción del empleo

Site: Mass General Brigham IncorporatedMass General Brigham relies on a wide range of professionals, including doctors, nurses, business people, tech experts, researchers, and systems analysts to advance our mission. As a not-for-profit, we support patient care, research, teaching, and community service, striving to provide exceptional care. We believe that high-performing teams drive groundbreaking medical discoveries and invite all applicants to join us and experience what it means to be part of Mass General Brigham.

Job Summary

The Privacy Officer serves as the primary privacy advisor and operational lead for Mass General Brigham Community Hospitals. This role partners closely with hospital leadership, clinical and operational teams, Compliance, Health Information Management (HIM), Information Security, Legal, and other stakeholders to ensure compliance with federal and state privacy laws, organizational policies, and regulatory requirements. The Privacy Officer provides day-to-day privacy consultation, leads investigations of privacy incidents, supports audits and monitoring activities, develops and implements privacy policies and procedures, and serves as a trusted resource to community hospital leaders on complex privacy and confidentiality matters. The position helps bridge enterprise privacy strategy with local operational needs across multiple community-based entities. This role is ideal for an experienced healthcare privacy professional who enjoys serving as the primary privacy resource for hospital leadership, partnering across disciplines, managing complex investigations, translating regulations into operational practice, and driving a culture of privacy throughout a large, integrated healthcare system.

Qualifications

Education: Bachelor's Degree in a related field of study required

Experience: 5+ years of progressive privacy or health information managerial and leadership experience working in a complex healthcare system required

Privacy Operations and Incident Management

• Serve as the designated Privacy Officer for assigned Community Hospitals.
• Lead investigations of privacy incidents and potential HIPAA violations.
• Document, manage, and track incidents through established enterprise reporting and case management systems.
• Coordinate corrective actions, mitigation plans, and follow-up activities.
• Partner with operational, clinical, compliance, and information security teams to address privacy risks.
• Monitor trends and identify opportunities for process improvement and risk reduction.

Regulatory Compliance

• Advise stakeholders on HIPAA, state privacy laws, 42 CFR Part 2, reproductive health privacy requirements, and other applicable regulations.
• Lead or participate in enterprise and local regulatory implementation efforts.
• Assess operational impacts of new privacy requirements and coordinate implementation plans.
• Develop guidance, workflows, and procedures to support compliance.

Policy Development and Governance

• Draft, revise, implement, and maintain privacy policies, standards, and procedures.
• Collaborate with enterprise stakeholders to ensure consistent privacy practices across community hospitals.
• Interpret regulatory and policy requirements for operational leaders and workforce members.
• Support governance committees and privacy-related workgroups as needed.

Consultation and Leadership Support

• Serve as a trusted advisor to hospital executives, department leaders, physicians, and staff on privacy-related matters.
• Provide practical guidance regarding patient confidentiality, access, disclosure, consent, and appropriate use of information.
• Build relationships across community hospitals to facilitate privacy compliance and risk management.
• Support operational leaders during investigations, audits, reviews, and regulatory inquiries.

Auditing, Monitoring, and Risk Management

• Support privacy auditing and monitoring activities, including investigations of inappropriate access and other compliance concerns.
• Review audit findings and partner with operational leaders on remediation efforts.
• Participate in risk assessments and proactive privacy monitoring initiatives.
• Assist with privacy-related metrics, reporting, and trend analysis.

Education and Awareness

• Deliver privacy education and awareness activities for workforce members.
• Develop communications, guidance documents, and privacy resources.
• Support organizational change management efforts related to privacy programs and regulatory requirements.
• Promote a culture of privacy and confidentiality throughout community hospitals.

Working Schedule

Hybrid, M-F eastern standard business hours. Onsite required 1x/week

Additional Job Details (if applicable)

• Remote Type: Hybrid
• Work Location: 399 Revolution Drive
• Scheduled Weekly Hours: 40
• Employee Type: Regular
• Work Shift Day: (United States of America)
• Pay Range: - /Grade 8

At Mass General Brigham, we believe in recognizing and rewarding the unique value each team member brings to our organization. Our approach to determining base pay is comprehensive, and any offer extended will take into account your skills, relevant experience if applicable, education, certifications and other essential factors. The base pay information provided offers an estimate based on the minimum job qualifications; however, it does not encompass all elements contributing to your total compensation package. In addition to competitive base pay, we offer comprehensive benefits, career advancement opportunities, differentials, premiums and bonuses as applicable and recognition programs designed to celebrate your contributions and support your professional growth.

EEO Statement

0100 Mass General Brigham Incorporated is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religious creed, national origin, sex, age, gender identity, disability, sexual orientation, military service, genetic information, and/or other status protected under law. We will ensure that all individuals with a disability are provided a reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. To ensure reasonable accommodation for individuals protected by Section 503 of the Rehabilitation Act of 1973, the Vietnam Veteran's Readjustment Act of 1974, and Title I of the Americans with Disabilities Act of 1990, applicants who require accommodation in the job application process may contact Human Resources at (857)-282-7642.

Mass General Brigham Competency Framework

At Mass General Brigham, our competency framework defines what effective leadership "looks like" by specifying which behaviors are most critical for successful performance at each job level. The framework is comprised of ten competencies (half People-Focused, half Performance-Focused) and are defined by observable and measurable skills and behaviors that contribute to workplace effectiveness and career success. These competencies are used to evaluate performance, make hiring decisions, identify development needs, mobilize employees across our system, and establish a strong talent pipeline.