Healthcare Privacy Leader – HIPAA & Compliance

Mass General Brigham; Somerville (MA); Hybrid; USD 120,000 - 170,000; Full time

Job summary

Mass General Brigham seeks a Privacy Officer to serve as the primary privacy advisor for community hospitals. You will partner with hospital leadership, HIM, Compliance, Legal, and Information Security to ensure HIPAA and state privacy law compliance across the system.

The role includes day-to-day privacy consultations, investigations of incidents, policy development, and guidance on confidentiality, access, disclosure, and appropriate use of information in a large integrated health system.

Qualifications

• Bachelor’s degree required in a related field.
• 5+ years of progressive privacy or health information leadership experience.
• Ability to lead privacy investigations and coordinate across departments.
• Knowledge of HIPAA, state privacy laws, and regulatory requirements.
• Experience in policy development and governance for large health systems.

Responsibilities

• Serve as the designated Privacy Officer for assigned Community Hospitals.
• Lead investigations of privacy incidents and HIPAA violations.
• Document and track incidents through enterprise reporting and case management systems.
• Coordinate corrective actions and risk mitigation with stakeholders.
• Advise on privacy workflows, disclosures, and patient confidentiality.
• Support governance committees and privacy-related workgroups.

Skills

Privacy leadership

Regulatory compliance

Incident management

Cross-functional collaboration

Healthcare privacy experience

Education

Bachelor’s Degree in a related field

Tools

Case management systems

Job description

Mass General Brigham seeks a Privacy Officer to serve as the primary privacy advisor for community hospitals. You will partner with hospital leadership, HIM, Compliance, Legal, and Information Security to ensure HIPAA and state privacy law compliance across the system.

The role includes day-to-day privacy consultations, investigations of incidents, policy development, and guidance on confidentiality, access, disclosure, and appropriate use of information in a large integrated health system.