Privacy Attorney

Gainwell Technologies LLC; Texas; Remote; USD 129,000 - 185,000; Full time

Benefits offered by this job

Remote work

401(k) matching

Health benefits

Educational assistance

Job summary

Gainwell Technologies LLC is seeking a Privacy Attorney / Privacy Officer to serve as the single privacy contact for large healthcare accounts and ensure HIPAA Privacy and Security compliance across the client portfolio. This role advises staff and executives on applicable privacy laws and leads complex audit responses and regulator interactions.

The position oversees privacy programs, policies, training, and incident investigations, coordinating with AI governance and security teams to ensure

Qualifications

• 5-7 years of experience in healthcare privacy, including establishing and adhering to corporate policies on privacy, confidentiality, and release of information.
• Strong written and verbal communication skills, with the ability to explain complex legal and regulatory requirements to executives, technical teams, and clients.
• Possess and maintain privacy certification from HCCA, IAPP, AHIMA, or equivalent. CIPP/US is preferred.
• Experience in a healthcare payer or insurance setting, or in a state or federal agency is preferred.
• AI Governance experience is preferred.

Responsibilities

• Subject matter expert for HIPAA Privacy and Security regulations and state/local privacy laws, including OCR and NIST guidance.
• Advise staff and executives regarding privacy laws and manage complex matters, including audit responses and regulator interactions.
• Advise product teams on privacy regulations and Privacy-By-Design principles.
• Review technologies, analytics, and AI use cases to ensure privacy compliance with emerging AI laws.
• Investigate privacy incidents and conduct risk assessments to determine impact and drive compliance.
• Develop and deliver privacy and security awareness training, including onboarding and annual training, and maintain training records.
• Conduct monitoring assessments to ensure staff compliance with privacy policies.
• Be the face of privacy for staff and foster a culture of compliance.
• Author and maintain documentation supporting HIPAA compliance, including policies, IRPs, PIAs, and related controls.
• Be available outside normal hours to respond to privacy incidents affecting operations.
• Assist clients with privacy rights requests and coordinate with contracting on BAAs and privacy contract requirements.
• Support corporate privacy initiatives and training as requested.

Skills

Healthcare privacy

Regulatory compliance

HIPAA

Security governance

Education

Juris Doctor (ABA-accredited)

Job description

Select how often (in days) to receive an alert:

Privacy Attorney

Location:

Any city, TX, US, 99999

Work Mode: Virtual (Exception only)

Great companies need great teams to propel their operations. Join the group that solves business challenges and enhances the way we work and grow. Working at Gainwell carries its rewards. You’ll have an incredible opportunity to grow your career in a company that values your contributions and puts a premium on work flexibility, learning, and career development.

Summary

The Privacy Attorney / Privacy Officer serves as the single customer point of contact for privacy on large healthcare customer accounts and is responsible for account compliance with the HIPAA Privacy and Security Rules and state privacy laws. As a licensed attorney, the Privacy Attorney / Privacy Officer also advises Gainwell staff and executives on applicable state and federal privacy laws and manages complex matters, including external and internal audit responses and interactions with regulators.

Gainwell clients are highly regulated with comprehensive privacy and security needs. This position will implement and oversee account-specific privacy programs, including policies and procedures, quality improvement projects, incident investigations, risk assessment activities, and staff member training. The Privacy Attorney / Privacy Officer reports to the Corporate Privacy Officer.

Your role in our mission

• Subject matter expert for HIPAA Privacy and Security regulations and state/local privacy laws, including OCR and NIST privacy and security guidance and controls.
• Interpret and apply privacy and confidentiality requirements specific to government health programs, including Medicaid safeguarding requirements under 42 CFR Part 431, Subpart F, 42 CFR Part 2 for substance use disorder records, IRS Publication 1075 for federal tax information, and CMS and state agency contract requirements.
• Advise our staff and executives regarding applicable state and federal privacy laws and manage complex matters, including external and internal audit responses, contract analysis, and interacting with regulators.
• Advise our product teams on applicable privacy regulations and Privacy-By-Design principles.
• Review new technologies, analytics, and AI use cases and partner with AI governance and information security teams to ensure compliance with privacy and emerging AI laws.
• Investigate and report on privacy-related incidents. Conduct risk assessments to determine impact of incidents. Drive compliance with federal and state reporting requirements.
• Develop and deliver privacy and security awareness training for account staff, including onboarding and annual training, and maintain records of training completion.
• Conduct monitoring assessments to ensure staff member compliance with privacy and security policies and procedures.
• Be the face of privacy for staff members and create a culture of compliance in which reporting of concerns and incidents is encouraged and supported.
• Author and maintain all documentation supporting HIPAA compliance including privacy policies, health information management procedures, Incident Response Plans (IRPs), Privacy Impact Assessments (PIAs), and related controls.
• Be available outside normal business hours, including nights and weekends, to respond to privacy and security emergency incidents that may affect company and client operations.
• Assist clients in handling requests from individuals exercising their privacy rights, including access and amendment requests as well as privacy complaints.
• Work with the client Contracting Officer to supply and support initiatives and deliverables as outlined in the contract. Provide guidance on Business Associate Agreement (BAA) provisions and related privacy and security contract requirements.
• Support and contribute to Corporate privacy initiatives, documentation, and training as requested by the Corporate Privacy Officer.

The above list of core responsibilities for this position is not all-inclusive. The Privacy Attorney / Privacy Officer may perform additional duties as needed to support Gainwell or client account needs.

What we're looking for

• 5-7 years of experience in healthcare privacy, including overseeing the establishment, implementation, and adherence to corporate policies on privacy, confidentiality, and release of information, and developing, conducting, and reporting on privacy risk assessments.
• Law degree from an ABA-accredited law school and licensed to practice in at least one U.S. state.
• Strong written and verbal communication skills, with the ability to explain complex legal and regulatory requirements to executives, technical teams, and clients, and to manage multiple priorities in a fast-paced environment.
• Possess and maintain privacy certification from HCCA, IAPP, AHIMA, or equivalent. CIPP/US is preferred.
• Experience in a healthcare payer or insurance setting, or in a state or federal agency, is preferred.
• AI Governance experience is preferred

What you should expect in this role

• Remote opportunity
• High level of ownership for legal strategy, risk management, and compliance across business functions
• Collaboration with executive leadership, legal team members, and cross-functional stakeholders
• Opportunity to influence enterprise legal strategy and support complex business initiatives

Applications for this position will be accepted until November 30, 2026.

#LI-LM1

#LI-REMOTE

The pay range for this position is$129,200.00-$184,500.00 per year, however, the base pay offered may vary depending on geographic region, internal equity, job-related knowledge, skills, and experience among other factors. Put your passion to work at Gainwell. You’ll have the opportunity to grow your career in a company that values work flexibility, learning, and career development. All salaried, full-time candidates are eligible for our generous, flexible vacation policy, a 401(k) employer match, comprehensive health benefits , and educational assistance. We also have a variety of leadership and technical development academies to help build your skills and capabilities.

We believe nothing is impossible when you bring together people who care deeply about making healthcare work better for everyone. Build your career with Gainwell, an industry leader. You’ll be joining a company where collaboration, innovation, and inclusion fuel our growth. Learn more about Gainwell at our company website and visit our Careers site for all available job role openings.

Gainwell Technologies is an Equal Opportunity Employer, where all qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical condition), age, sexual orientation, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. Gainwell Technologies defines “wages” and “wage rates” to include “all forms of pay, including, but not limited to, salary, overtime pay, bonuses, stock, stock options, profit sharing and bonus plans, life insurance, vacation and holiday pay, cleaning or gasoline allowances, hotel accommodations, reimbursement for travel expenses, and benefits.