Privacy Program Specialist, Consultant

Blue Shield of California; United States; Hybrid; USD 112,000 - 167,000; Full time

Job summary

Blue Shield of California is seeking a Privacy Office Specialist, Consultant to support development and enforcement of the Privacy Program. You will oversee compliance with HIPAA/HITECH, CMIA, and related laws, lead investigations, and coordinate with business units to remediate risks. Hybrid work arrangement in Oakland, CA.

Ideal candidates have 7+ years in healthcare privacy, strong analytical skills, and proficiency with MS Office; CIPP/US or CHPC preferred. Reports to the Privacy Office Sr.

Qualifications

• Bachelor’s degree or high school diploma with 4 years of relevant experience.
• 7 years of prior relevant experience in healthcare privacy or related field.
• Strong knowledge of HIPAA/HITECH, CMIA, and related privacy laws.
• Experience with privacy investigations and incident management.
• Excellent organizational skills and independent judgment in a regulated setting.
• Proficiency with MS Word, Excel, PowerPoint, and Outlook.

Responsibilities

• Oversee compliance with state and federal privacy laws including HIPAA and HITECH.
• Lead privacy investigations, document case files, and conduct root-cause analysis.
• Provide privacy guidance to internal clients on projects and initiatives.
• Respond to privacy-related requests and inquiries.
• Develop workforce privacy training, policies, and desk-level procedures.
• Liaise with regulatory agencies on letters, reviews, and audits.
• Assess requests to disclose PHI to third parties and grant access where appropriate.
• Perform other duties as assigned.

Skills

Healthcare privacy

Privacy investigations

HIPAA/HITECH

CMIA

TCPA knowledge

Analytical thinking

Independent judgment

Team collaboration

Regulatory liaison

MS Office (Word, Excel, PowerPoint,Out

Education

Bachelor’s degree

High School Diploma/GED with 4 years exp

Tools

Microsoft Word

Microsoft Excel

PowerPoint

Outlook

Job description

Your Role

The Privacy Office is responsible for development, implementation, and oversight of Blue Shield’s Privacy Program. The Privacy Program ensures that Blue Shield and its affiliated covered entities, including Blue Shield of California Promise Health Plan, are in compliance with state and federal privacy laws and regulations, including the Health Insurance Portability and Accountability Act of 1996 (HIPAA), the Health Information Technology for Economic and Clinical Health Act of 2009 (HITECH), and California’s Confidentiality of Medical Information Act (CMIA). The Privacy Program Specialist, Consultant reports to the Privacy Office Sr. Manager and plays an essential role in advancing and enforcing Blue Shield’s Privacy Program.

Job Description

The Privacy Office is responsible for development, implementation, and oversight of Blue Shield’s Privacy Program. The Privacy Program ensures that Blue Shield and its affiliated covered entities, including Blue Shield of California Promise Health Plan, are in compliance with state and federal privacy laws and regulations, including the Health Insurance Portability and Accountability Act of 1996 (HIPAA), the Health Information Technology for Economic and Clinical Health Act of 2009 (HITECH), and California’s Confidentiality of Medical Information Act (CMIA). The Privacy Program Specialist, Consultant reports to the Privacy Office Sr. Manager and plays an essential role in advancing and enforcing Blue Shield’s Privacy Program.

Responsibilities

In this role, you will:

• Be responsible for the oversight of Blue Shield's compliance with state and federal privacy laws, including the privacy component of HIPAA and HITECH
• The majority of this role involves leading assigned privacy investigations, timely and accurately document case files, direct investigations into root cause analysis, address mitigation, and work with impacted business units to develop and complete corrective action for remediation and to minimize risk of recurrence
• Consult with internal clients to review and provide privacy guidance about proposed projects and initiatives and serve as a privacy subject matter expert
• Respond to privacy-related requests and inquiries
• Develop and assist with the implementation of workforce privacy training programs, privacy policies, desk-level procedures, resource guides, job aids, and other educational tools
• Act as a liaison with regulatory enforcement agencies to address technical assistance letters, investigation compliance reviews, audits, and other related reviews
• Assist, evaluate, and determine appropriateness of ad hoc requests from internal clients to disclose protected health information (PHI) to third parties and/or to allow third parties access to, or use of, Blue Shield PHI
• Perform other duties as assigned

Qualifications

Your Knowledge and Experience

Required

• Requires a bachelor’s degree or High School Diploma/GED and 4 years of additional relevant experience in lieu of a degree
• Requires 7 years of prior relevant experience
• Requires prior experience in healthcare privacy, cybersecurity incident management, investigative services, or another related field
• Requires a solid understanding of state and federal privacy laws, including HIPAA/HITECH, CMIA, and privacy-related consumer protections laws, such as the Telephone Consumer Protection Act (TCPA), as well as knowledge of Department of Health Care Services (DHCS) privacy requirements for Medi-Cal Managed Care Health Plans and Centers for Medicare or Medi-Cal and Medicaid (CMS) Medicare or Medi-Cal Managed Care Plans
• Requires excellent organizational skills and strong independent judgment, problem-solving, critical and analytical thinking skills, including an exceptional “moral compass” and work ethic
• Requires ability to work collaboratively in a team, perform duties with minimal supervision, multi-task, and to deliver a quality work product in a highly regulated, demanding, and constantly changing corporate environment
• Requires proficiency in Microsoft Word, Access, Excel, PowerPoint, and Outlook

Preferred

• Possesses extensive experience in directly handling investigations
• Privacy healthcare-related experience that includes a familiarity with Privacy Impact Assessments and Data Protection Impact Assessments; auditing and monitoring; investigating, managing, and reporting privacy incidents; health information management
• CIPP/US Certification or HCCA CHPC Certification
• Experience and knowledge of compliance or privacy incident management software

Hybrid

This role requires employees to be in-office based on our hybrid workplace model, balancing purposeful in-person collaboration with flexibility. For most teams, this means coming into the office two days each week.

Employees living more than 50 miles from an office location will work with their manager to determine in-office time based on business need.

About Us

About Blue Shield of California

As of January 2025, Blue Shield of California became a subsidiary of Ascendiun. Ascendiun is a nonprofit corporate entity that is the parent to a family of organizations including Blue Shield of California and its subsidiary, Blue Shield of California Promise Health Plan; Altais, a clinical services company; and Stellarus, a company designed to scale healthcare solutions. Together, these organizations are referred to as the Ascendiun Family of Companies.

At Blue Shield of California, our mission is to create a healthcare system worthy of our family and friends and sustainably affordable. We are transforming health care in a way that genuinely serves our nonprofit mission by lowering costs, improving quality, and enhancing the member and physician experience.

To achieve our mission, we foster an environment where all employees can thrive and contribute fully to address the needs of the various communities we serve. We are committed to creating and maintaining a supportive workplace that upholds our values and advances our goals.

Blue Shield is a U.S. News Best Company to work for, a Deloitte U.S. Best Managed Company and a Top 100 Inspiring Workplace. We were recognized by Fair360 as a Top Regional Company, and one of the 50 most community-minded companies in the United States by Points of Light. Here at Blue Shield, we strive to make a positive change across our industry and communities – join us!

Our Values:

• Honest. We hold ourselves to the highest ethical and integrity standards. We build trust by doing what we say we're going to do and by acknowledging and correcting where we fall short.
• Human. We strive to listen and communicate effectively, showing empathy by understanding others' perspectives.
• Courageous. We stand up for what we believe in and are committed to the hard work necessary to achieve our ambitious goals.

Our Workplace Model

We believe in fostering a workplace environment that balances purposeful in-person collaboration with flexibility - providing clear expectations while respecting the diverse needs of our workforce. Our workplace model is designed around intentional in-person interaction, collaboration, connection, creativity and flexibility:

• For most teams, this means coming into the office two days per week.
• Employees living more than 50 miles from an office location, out of state employees, and employees in certain member-facing roles should work with their manager to determine in-office time based on business need.
• For employees with medical conditions that may impact their ability to work in-office, we are committed to engaging in an interactive process and providing reasonable accommodations to ensure their work environment is conducive to their success and well-being.

The Company reserves the right to require more presence in the office based on business needs, and requirements are subject to change with periodic reviews.

Physical Requirements:

Office Environment - roles involving part to full time schedule in Office Environment. Based in our physical offices and work from home office/deskwork - Activity level: Sedentary, frequency most of work day.

Please click here for further physical requirement detail.

Equal Employment Opportunity:

External hires must pass a background check/drug screen. Qualified applicants with arrest records and/or conviction records will be considered for employment in a manner consistent with Federal, State and local laws, including but not limited to the San Francisco Fair Chance Ordinance. All qualified applicants will receive consideration for employment without regards to race, color, religion, sex, national origin, sexual orientation, gender identity, protected veteran status or disability status and any other classification protected by Federal, State and local laws.

JOB INFO

Job Identification : 20261593

Job Category : Legal and Compliance

Posting Date : 2026-08-28T15:41:08+00:00

Job Schedule : Full time

Locations :

Oakland, CA, United States

CA, United States

Pay Range for California : $111540.00 to $167420.00

Pay Range for Bay Area : $125736.00 to $188728.00

Note : Please note that this range represents the pay range for this and many other positions at Blue Shield that fall into this pay grade. Blue Shield salaries are based on a variety of factors, including the candidate experience, location (California, Bay Area, or outside California), and current employee salaries for similar roles.

Role can be filled by a candidate requiring sponsorship : No