Privacy Manager

C002 Medical University Hospital Authority (MUHA); United States; On-site; USD 110,000 - 150,000; Full time

Job summary

The Privacy Manager at MUHA leads day-to-day privacy operations and supports MUSC Health Privacy Program by collaborating with Health Information Management, Information Security, Legal, Human Resources, Compliance and Clinical Operations to strengthen privacy practices.

The role requires a bachelor's degree and five years of related experience, or an internal candidate with a high school diploma and seven years.

Qualifications

• Bachelor's degree and five years of related privacy experience, or internal candidate with a high school diploma and seven years of related experience.
• Knowledge of HIPAA, HITECH, and other privacy regulations and standards.
• Experience conducting privacy investigations, breach risk assessments, incident response, and regulatory reporting.
• Strong planning, communication, and training delivery skills.
• Ability to manage multiple priorities with strict confidentiality.

Responsibilities

• Serve as SME on HIPAA and privacy requirements.
• Supervise and mentor privacy team members.
• Monitor regulatory developments impacting privacy compliance.
• Oversee privacy investigations, breach assessments, and regulatory reporting.
• Assist with the development and maintenance of privacy policies and procedures.
• Participate in enterprise governance committees.
• Conduct regular privacy audits and risk mitigation.
• Respond to privacy inquiries, incidents, and escalations.

Skills

HIPAA knowledge

Privacy investigations

Regulatory reporting

Communication skills

Leadership

Education

Bachelor's degree

HS diploma + 7 years experience

Tools

CHPC certification

CIPP/US preferred

Job description

Job Description Summary

Under the leadership of the Director of Privacy, the Privacy Manager is responsible for supporting and advancing the MUSC Health Privacy Program through oversight of day-to-day privacy operations, regulatory activities, and privacy initiatives. The role works collaboratively with teams across the enterprise such as Health Information Management, Information Security, Legal, Human Resources, Compliance and Clinical Operations to strengthen organizational privacy practices. Primary responsibilities include:

• Serving as a subject matter expert on HIPAA and other state/federal privacy requirements
• Supervising, mentoring and supporting one or more privacy team members, as assigned
• Monitoring regulatory and industry developments impacting privacy compliance
• Overseeing privacy investigations, breach assessments, and regulatory reporting requirements
• Assisting with the development, implementation, and ongoing maintenance of system-wide privacy policies, procedures, and standards
• Participating in enterprise governance committees
• Conducting regular privacy audits and investigations to identify potential privacy risks and mitigation strategies
• Responding to privacy-related inquiries, incidents, and escalations in a timely and effective manner
• Assisting the Director of Privacy with all other duties as assigned

Entity and Compensation

Entity Medical University Hospital Authority (MUHA) Worker Type Employee Worker Sub-Type Regular Cost Center CC002278 SYS - Compliance Program Pay Rate Type Salary Pay Grade Health-31 Scheduled Weekly Hours 40 Work Shift

Job Description

This position requires a bachelor’s degree and five years of related experience or an internal candidate with a high school diploma and at least seven years of related experience. A successful candidate will demonstrate:

• Knowledge of HIPAA, HITECH, and other applicable state and federal privacy regulations and industry standards
• Experience conducting privacy investigations, breach risk assessments, incident response activities, and regulatory reporting
• Strong problem-solving and critical-thinking skills with exceptional attention to detail
• Ability to manage multiple priorities while maintaining strict confidentiality
• Excellent organizational skills and flexibility to effectively operate in a dynamic, fast-paced healthcare environment
• Strong written and verbal communication skills, including the ability to develop and deliver presentations, educational programs, and live training to all levels of the organization
• Ability to build collaborative relationships and effectively lead meetings, work groups, and cross-functional initiatives
• Ability to interpret regulatory requirements and translate them into practical operational guidance, policies, and procedures

Certifications

Certified in Healthcare Privacy Compliance (CHPC) required upon hire or within six (6) months of employment. Certified Information Privacy Professional/United States (CIPP/US) certification is preferred.

Additional Requirements

This position requires the ability to independently manage a broad range of responsibilities and respond effectively to competing priorities in a complex healthcare environment. The position is based in South Carolina and requires occasional travel to MUSC Health facilities and affiliated sites throughout the enterprise.

Education and Work Experience

Education: Bachelor's degree or equivalent education and/or relevant work experience. Work Experience: 7 years progressive work experience and 2 years management experience.

Company Culture

If you like working with energetic enthusiastic individuals, you will enjoy your career with us! The Medical University of South Carolina is an Equal Opportunity Employer. MUSC does not discriminate on the basis of race, color, religion or belief, age, sex, national origin, gender identity, sexual orientation, disability, protected veteran status, family or parental status, or any other status protected by state laws and/or federal regulations.

Medical University of South Carolina participates in the federal E-Verify program to confirm the identity and employment authorization of all newly hired employees.

MUSC attracts more than $250 million annually in research funding, making it the biggest magnet for biomedical, extramural research dollars of all institutions of higher learning in South Carolina.

The Clinical and Translational Science Award (CTSA) Program aims to advance clinical and translational science to increase the speed at which new treatments become available to patients.

MUSC Health, the clinical enterprise, operates a 750 bed medical center, which includes a nationally recognized Children’s Hospital, the Ashley River Tower (cardiovascular, digestive disease, and surgical oncology), Hollings Cancer Center (one of fewer than 70 elite National Cancer Institute designated centers), a Level I Trauma Center and the Institute of Psychiatry. In addition, there are more than 100 outreach clinics, hospital/health system affiliations, and telehealth sites. U.S. News & World Report placed us among the top one percent of all American hospitals, with 11 specialties in the top 50. The MUSC Medical Center is also one of only three Magnet designated hospitals in South Carolina.