PRIVACY AND SECURITY MANAGER

Kids for the Future; Seattle (WA); On-site; USD 88,000 - 97,000; Full time

Job summary

SIHB seeks a Privacy and Security Manager in Seattle to mature privacy, governance, risk, and information security practices across the organization.

You will protect PHI/PII and translate regulatory requirements into practical, sustainable controls while collaborating with IT, HIM, Clinical Operations, Data Analytics, HR, and Finance.

Qualifications

• Experience in privacy, compliance, governance, risk management, information security.
• Experience developing or maintaining policies, procedures, standards, controls, audits, investigations, risk assessments, or other governance-related activities.
• Ability to translate regulatory, technical, and operational requirements into clear and actionable guidance.

Responsibilities

• Lead privacy, information security, compliance, and risk management activities.
• Supervise and develop staff supporting privacy, security, audits, investigations, and incident response.
• Draft, maintain, and operationalize privacy and information security policies, standards, and procedures.
• Support HIPAA privacy and security compliance, including investigations, documentation, breach response, and corrective actions.
• Coordinate risk assessments, audits, remediation plans, and executive-level reporting.
• Partner with IT and department leaders to embed privacy and security requirements into systems, workflows, and organizational changes.
• Provide guidance on appropriate access, data handling, PHI/PII protection, and security risk considerations.
• Support vendor and third-party risk reviews involving access to sensitive data, PHI, or PII.

Skills

Privacy

Compliance

Governance

Risk management

Information security

Healthcare operations

Audit

Regulatory compliance

Regulatory requirements translation

Education

Bachelor’s degree or equivalent experience

Certifications such as CHPS/CHC/HCISPP/CISM (preferred)

Job description

• Location 611 12th Avenue South,Seattle, WA, 98104,United States
• Base Pay $88,000.00 - $97,000.00 / Year
• Employee Type FT Exempt
• Required Degree 4 Year Degree

Description

SIHB Core Competencies

As part of the SIHB team, all employees are expected to embody the following competencies:

• Commitment to Indigenous and Organizational Values: Everything we do at SIHB is centered on Traditional Indian Medicine. It is our responsibility to maintain cultural integrity in all that we do.
• Accountability: All employees of SIHB effectively manage their work and the work of their teams. We take ownership of our actions and decisions. We all strive to deliver the highest quality work and care while respecting our teammates and relatives.
• Collaboration: SIHB is a team-oriented organization. As team members, we share the responsibility of working toward a common purpose. We collaborate with our colleagues across the organization to deliver the highest quality of care and results in alignment with our mission, vision, values, and Theory of Change.
• Communication: We practice effective and clear communication with staff, relatives, teams, and the community. We demonstrate empathy among each other and with those we serve and transparency in our decision-making.
• Customer Service Orientation: All employees of SIHB recognize the needs of the diverse community we serve. We put the needs of our relatives first by delivering the highest quality, professional, responsive, and innovative care. Our relatives come first and deserve the best.

Organizational Responsibilities

• Hold Indigenous values and practices with respect and integrity
• Hold yourself accountable to the highest standard by being resourceful, innovative, creative, and solution-oriented
• Actively participate in organizational activities with the understanding that success is achieved through teamwork.
• Recognize that communication is central to the organization’s success and actively champion your words and actions to maintain respect for others, encourage constructive feedback, be open to share laughter and acknowledge differences in skills and opinions, all while keeping others’ best intentions in mind.
• At SIHB, we refer to our customers as Relatives. Our Relatives come first and deserve the best. Serve the needs of our Relatives first by delivering the highest quality, professional, responsive, and innovative care.

Position Summary

The Privacy and Security Manager helps mature SIHB’s privacy, governance, risk, and information security practices across the organization. This role supports the protection of PHI, PII, and sensitive organizational information while helping teams translate regulatory and security requirements into practical, sustainable controls.

This position works closely with IT leadership and partners cross-functionally with HIM, Clinical Operations, Data Analytics, HR, Finance, and other departments to embed privacy and security requirements into systems, workflows, vendor relationships, and day-to-day operations.

Organizational Structure/Reporting Relationships

This position reports to the IT Director and has management responsibility for direct reports .

Job Responsibilities

• Lead and support privacy, information security, compliance, and risk management activities.
• Supervise and develop staff supporting privacy, security, audits, investigations, and incident response.
• Draft, maintain, and operationalize privacy and information security policies, standards, and procedures.
• Support HIPAA privacy and security compliance, including investigations, documentation, breach response, and corrective actions.
• Coordinate risk assessments, audits, remediation plans, and executive-level reporting.
• Partner with IT and department leaders to embed privacy and security requirements into systems, workflows, and organizational changes.
• Provide guidance on appropriate access, data handling, PHI/PII protection, and security risk considerations.
• Support vendor and third-party risk reviews involving access to sensitive data, PHI, or PII.

Requirements

Qualifications & Skills

• Experience in privacy, compliance, governance, risk management, information security, healthcare operations, audit, regulatory compliance, or a related field.
• Experience developing or maintaining policies, procedures, standards, controls, audits, investigations, risk assessments, or other governance-related activities.
• Ability to assess risk, identify gaps, and recommend practical, sustainable solutions.
• Strong analytical thinking, attention to detail, and sound judgment when evaluating complex issues and organizational risks.
• Ability to learn and apply new concepts in privacy, compliance, governance, risk management, and information security.
• Ability to translate regulatory, technical, and operational requirements into clear and actionable guidance.
• Strong written communication, documentation, organizational, and follow-through skills.
• Experience leading projects, initiatives, teams, or staff, with the ability to support employee growth, accountability, and professional development.
• Ability to manage multiple priorities while maintaining accountability and professionalism.
• Healthcare, nonprofit, FQHC, Tribal, or other highly regulated environment experience preferred.

Education

• Bachelor’s degree in Healthcare Administration, Compliance, Public Health, Information Systems, Information Technology, or a related field
• (Equivalent experience may substitute for formal education).
• Professional certifications such as CHPS, CHC, HCISPP, CISM, or similar are preferred but not required.

Other Job Requirements

• Transportation: Reliable transportation and the ability to travel to multiple locations as needed.
• Schedule Flexibility: Willingness to work occasional evenings or weekends in support of incident response or organizational needs.
• Background Check: Successful completion of a background check.
• Vaccination: Must comply with organizational vaccination requirements.

Work Environment

• Schedule: 4x10 work schedule (Monday through Friday)
• Shift: 7:00 AM to 6:00 PM daily (with one day off), occasional after-hours or weekend work.
• Onsite Only – no remote work option