Legal Compliance Senior Analyst

Cigna; United States; Hybrid; USD 63,000 - 105,000; Full time

Job summary

The Cigna Group in the United States is seeking a Senior Analyst in Legal Compliance to proactively research, analyze, and report on privacy incidents, including disclosures and data breaches, working across business units, legal, and technology teams.

You will ensure data integrity for executive reports, identify recurring issues, evaluate controls, and support audits, training, and regulatory engagement, with high-touch incident support for designated clients and timely notifications.

Qualifications

• Bachelor's degree in health care, law, or related field.
• 3+ years of healthcare privacy/compliance experience.
• Experience managing privacy incidents and risk assessments.
• Knowledge of state and Federal breach notification laws, including HIPAA.
• Experience with privacy management software and incident-tracking tools.
• Ability to manage multiple priorities in a fast-paced environment.

Responsibilities

• Lead research, management, and resolution of privacy issues presented to the Privacy Office.
• Support privacy compliance training and auditing activities.
• Prepare and issue notifications to clients, partners, and regulators.
• Analyze privacy incident trends and develop data-driven risk mitigation plans.
• Coordinate timely response efforts and correct actions.
• Partner with internal departments to promote privacy best practices.
• Serve as a privacy resource for internal and external partners.
• Support audits and policy development and employee training.
• Provide high-touch incident response support for designated clients and client-specific notifications.
• Coordinate and issue time-sensitive preliminary and ongoing incident notifications.
• Maintain responsiveness for time-sensitive privacy incidents.

Skills

Privacy incident management

Risk assessment

Cross-functional collaboration

HIPAA knowledge

Analytical communication skills

Education

Bachelor's degree

Job description

The Legal Compliance Senior Analyst serves as a pivotal member of the Office of Privacy and Innovation Governance, responsible for proactively researching, analyzing, and reporting on privacy incidents, including unauthorized disclosures and data breaches. This role requires advanced critical and strategic thinking to collaborate cross-functionally with business units, legal, compliance, and technology teams to identify root causes, implement corrective actions, and establish preventative measures that minimize organizational risk and drive continuous improvement.

The Legal Compliance Senior Analyst ensures the integrity and reliability of incident data used for executive-level reporting and supports the identification of recurring issues to inform risk mitigation strategies. This position also evaluates the effectiveness of preventative controls and partners with operational leaders to ensure adherence to privacy best practices and the successful implementation of corrective actions. The Legal Compliance Senior Analyst contributes to the achievement of strategic compliance objectives by supporting audits, privacy training initiatives, and regulatory engagement.

The Legal Compliance Senior Analyst also provides dedicated, high-touch incident support for designated clients, requiring a high degree of responsiveness, adaptability, and urgency when potential or suspected privacy incidents arise.

Key Duties and Responsibilities

• Lead the research, management, and resolution of privacy issues presented to the Privacy Office.
• Support and deliver privacy compliance training programs; perform auditing and monitoring activities to ensure ongoing adherence to regulatory requirements and internal policies.
• Prepare and issue required notifications to clients, business partners, and government regulators in accordance with applicable laws.
• Analyze privacy incident trends, identify emerging risks, and engage with stakeholders to develop data-driven risk mitigation plans.
• Assess potential and confirmed privacy incidents, determine appropriate resolutions, and coordinate timely response efforts.
• Partner with internal departments to promote privacy best practices and oversee the implementation of corrective actions.
• Serve as a subject matter expert and privacy resource for internal and external partners.
• Support strategic compliance initiatives, including internal audits, policy development, and employee training.
• Provide dedicated, high-touch incident response support for designated clients, ensuring prompt attention to potential or confirmed privacy incidents and client-specific notification requirements.
• Coordinate and issue time-sensitive preliminary and ongoing incident notifications to clients in accordance with contractual requirements and established notification timelines.
• Maintain a high degree of responsiveness and flexibility to address time-sensitive privacy incidents as they arise.

Qualifications

• Bachelor's degree
• 3+ years of Healthcare and/or PBM privacy and compliance experience required
• Demonstrated competency in privacy incident management and risk assessment.
• Strong analytical, communication, and interpersonal skills; proven ability to work cross-functionally and influence stakeholders.
• Knowledge of State and Federal breach notification laws, including HIPAA.
• Demonstrated competency with privacy management software and incident tracking tools.
• Ability to manage multiple priorities in a fast-paced, matrixed environment and adapt to evolving regulatory requirements.

This is a business funded role.

If you will be working at home occasionally or permanently, the internet connection must be obtained through a cable broadband or fiber optic internet service provider with speeds of at least 10Mbps download/5Mbps upload.

For this position, we anticipate offering an annual salary of 62,800 - 104,600 USD / yearly, depending on relevant factors, including experience and geographic location.

This role is also anticipated to be eligible to participate in an annual bonus plan.

At The Cigna Group, you'll enjoy a comprehensive range of benefits, with a focus on supporting your whole health. Starting on day one of your employment, you'll be offered several health-related benefits including medical, vision, dental, and well-being and behavioral health programs. We also offer 401(k), company paid life insurance, tuition reimbursement, a minimum of 18 days of paid time off per year, paid holidays, and leaves of absence.

Doing something meaningful starts with a simple decision, a commitment to changing lives. At The Cigna Group, we're dedicated to improving the health and vitality of those we serve. Through our divisions Cigna Healthcare and Evernorth Health Services, we are committed to enhancing the lives of our clients, customers and patients. Join us in driving growth and improving lives.