Privacy and HIPAA Program Specialist

CalPERS; Sacramento (CA); Hybrid; USD 73,000 - 118,000; Full time

Job summary

CalPERS is seeking a Privacy and HIPAA Program Specialist in Sacramento to safeguard PHI/PII and ensure HIPAA compliance across the information security program. The role involves risk assessments, privacy threshold and impact assessments, audits support, and ongoing regulatory monitoring. A SOQ is required as part of the application.

Hybrid telework with in-person duties, and a pathway for career growth within CalPERS' Information Security Office.

Qualifications

• Experience in privacy program development and implementation.
• Knowledge of HIPAA privacy rules and regulatory requirements.
• Ability to perform PHI/PII risk assessments and privacy impact assessments.

Responsibilities

• Participate in PHI/PII incidents and provide guidance on next steps.
• Perform Privacy Threshold Assessments and Privacy Impact Assessments.
• Ensure HIPAA and regulatory compliance across systems.
• Support audits, monitoring, and privacy training.
• Track regulatory changes and provide expert guidance.
• Review system changes for PII/PHI impacts.
• Develop and maintain HIPAA/privacy policies and procedures.

Skills

Privacy

HIPAA

PHI/PII

Risk assessment

Audits

Job description

Equal Opportunity Employer

The State of California is an equal opportunity employer to all, regardless of age, ancestry, color, disability (mental and physical), exercising the right to family care and medical leave, gender, gender expression, gender identity, genetic information, marital status, medical condition, military or veteran status, national origin, political affiliation, race, religious creed, sex (includes pregnancy, childbirth, breastfeeding and related medical conditions), and sexual orientation.

Equal Opportunity Employer

The State of California is an equal opportunity employer to all, regardless of age, ancestry, color, disability (mental and physical), exercising the right to family care and medical leave, gender, gender expression, gender identity, genetic information, marital status, medical condition, military or veteran status, national origin, political affiliation, race, religious creed, sex (includes pregnancy, childbirth, breastfeeding and related medical conditions), and sexual orientation. It is an objective of the State of California to achieve a drug‑free work place. Any applicant for state employment will be expected to behave in accordance with this objective because the use of illegal drugs is inconsistent with the law of the State, the rules governing Civil Service, and the special trust placed in public servants.

Position Details

Job Code #: JC-531526

Position #(s): 275-817-1402-010

Working Title: Privacy and HIPAA Program Specialist

Classification: INFORMATION TECHNOLOGY SPECIALIST I

$6,513.00 - $8,729.00 A

$7,163.00 - $9,599.00 B

$7,864.00 - $10,537.00 C

New to State candidates will be hired into the minimum salary of the classification or minimum of alternate range when applicable.

# of Positions: 1

Work Location: Sacramento County

Telework: Hybrid

Job Type: Permanent, Full Time

Department Information: The California Public Employees’ Retirement System (CalPERS) is the nation’s largest public pension fund, providing retirement and health benefits to public employees, retirees, and their families. Headquartered in downtown Sacramento, we are a destination employer with an international reputation for leadership and innovation. At CalPERS, we’re committed to people – the people we serve, our team members, and the larger community around us. CalPERS is situated near the Napa Valley, San Francisco, Lake Tahoe, and other desirable destinations, and we offer competitive benefit packages, compensation, and opportunities for advancement.

If you are interested in becoming part of a diverse and inclusive workforce where talent, experience, and expertise are valued, CalPERS invites you to apply for this employment opportunity. To find out more about our Diversity, Equity, and Inclusion efforts, visit our website !

To take a look at CalPERS as a destination employer, view this YouTube video .

Job Description And Duties

CalPERS Careers in Information Security Live Session: Join us on Thursday, September 10th at 11 a.m. to learn about careers in Information Security at CalPERS. Learn about what the team does, what the job is like day-to-day, and how you can get ready to apply. Register for the webinar by submitting your information using this link: Zoom Registration

Anticipated Interview Dates: We anticipate holding in-person interviews beginning the week of October 19, 2026.

Do you have a passion for Privacy and HIPAA compliance? Do you enjoy implementing and maintaining policies and procedures? The Information Security Office seeks a Privacy and HIPAA Program Specialist to help safeguard CalPERS' sensitive health data.

In This Role You Will:

• Participate in Protected Health Information and Personally Identifiable Information (PHI/PII) incidents, perform risk assessments and provide guidance on next steps
• Perform Privacy Threshold Assessments and Privacy Impact Assessments
• Ensure HIPAA and regulatory compliance
• Support audits, monitoring, and privacy training
• Track regulatory changes and provide expert guidance
• Review system enhancements for PII/PHI impacts
• Develop and maintain HIPAA/privacy policies and procedures

You’ll be part of a collaborative team dedicated to safeguarding CalPERS members’ information. You will find additional information about the job in the Duty Statement.

Telework Information

Act quickly to apply for this hybrid position, where you’ll enjoy up to 40% (two days) remote work, each week!

Sponsorship

This position is not eligible for visa sponsorship. Applicants must be authorized to work in the United States without the need for visa sponsorship. CalPERS does not participate in E-Verify for employment authorization purposes.

Effective July 1, 2025

The California Department of Human Resources (CalHR) implemented the Personal Leave Program 2025 (PLP 2025). PLP 2025 directs that each employee shall receive a 3 percent reduction in pay in exchange for 5 hours PLP 2025 leave credits, monthly. The salary range(s) included in the job advertisement do not reflect the 3 percent reduction in pay.

Special Requirements

Statement of Qualifications

Please provide a Statement of Qualifications (SOQ) for the hiring manager’s review. Applications received without an SOQ or those that do not respond to the specific questions below will not be considered.

The SOQ must be typed, titled “Statement of Qualifications,” and each response must list all relevant experience, education, and training, including duties performed. The SOQ must not exceed one page in length.

• Describe a situation in which the correct privacy or Health Insurance Portability and Accountability Act (HIPAA) compliance outcome was not immediately clear. Explain the competing considerations, how you researched or analyzed the issue, who/what resources you consulted and why, and how you ultimately reached your recommendation. Share what your recommendation was.

Minimum Qualifications

All experience and education relating to the Minimum Qualifications (MQs) listed on the Classification Specification should be included in your application package to clearly demonstrate how you meet the MQs for this position. If you are using education to meet MQs, please include your transcripts with your application package. If you have a degree from outside of the United States, you must submit an evaluation of this degree to determine the US equivalency. If you need an evaluation, you can visit the National Association of Credential Evaluation Services (NACES) website to find organizations that provide these services. The Classification Specification is located on this Job Posting under “Minimum Requirements.”

Please Note: You may need to pass an examination to establish list eligibility prior to a final offer of employment. To find and take an exam, visit CalHR’s CalCareers website.