Remote HIPAA Privacy Lead, Compliance & Risk Expert

Allia Health Group; Houston, Northern (TX, KY); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical benefits

Vision benefits

Dental benefits

401(k) with company match

PTO

Job summary

Allia Health Group is seeking a HIPAA Privacy Lead to own day-to-day interpretation, application, and oversight of the HIPAA Privacy Rule across AHG's U.S. operations. This enterprise role reports to the CCO & Privacy Officer and formalizes work currently led by the CCO, giving the Privacy program dedicated ownership as AHG grows.

This is a full-time remote position. The Privacy Lead will drive BAA management, privacy risk assessments, policy development, de-identification governance, and

Qualifications

• 5+ years of hands-on HIPAA Privacy compliance experience in a regulated environment.
• Experience with PHI/PII data flows and HIPAA risk assessments.
• Drafting/hosting BAAs, data-sharing agreements, and privacy policies.
• Experience with governance platforms (OneTrust, NAVEX, RSA Archer, ServiceNow GRC).
• Strong written communication translating regulatory requirements for business and technical teams.
• Experience with privacy incident management and training.

Responsibilities

• Maintain HIPAA Privacy policies across AHG entities and advise on PHI handling.
• Define and monitor HIPAA controls with GRC teams.
• Review designs for HIPAA alignment and privacy-by-design.
• Own BAA inventory and de-identification governance.
• Collaborate with outside counsel on privacy questions.
• Lead privacy risk assessments and breach analyses.
• Serve as privacy contact for complaints and inquiries.
• Lead vendor privacy due diligence and risk assessments.

Skills

HIPAA Privacy

Data mapping

Risk assessment

BAA management

Policy development

Regulatory liaison

Policy writing

Training delivery

Stakeholder collaboration

Education

CHC

CHPC

CIPP/US

Tools

OneTrust

NAVEX

RSA Archer

ServiceNow GRC

Job description

Allia Health Group is seeking a HIPAA Privacy Lead to own day-to-day interpretation, application, and oversight of the HIPAA Privacy Rule across AHG's U.S. operations. This enterprise role reports to the CCO & Privacy Officer and formalizes work currently led by the CCO, giving the Privacy program dedicated ownership as AHG grows.

This is a full-time remote position. The Privacy Lead will drive BAA management, privacy risk assessments, policy development, de-identification governance, and