Senior Privacy Compliance Lead (HIPAA & PHI Security)

Blue Cross and Blue Shield Association; Chicago (IL); On-site; USD 143,000 - 208,000; Full time

Job summary

The Blue Cross Blue Shield Association seeks a privacy and information security leader to establish and maintain privacy governance across the enterprise, aligning with HIPAA and regulatory requirements.

You will lead training, incident response, third-party risk, and de-identification efforts, collaborate with BCBS entities, and help mature the privacy program and control framework across the organization.

Qualifications

• Bachelor's degree in Information Technology or related field, or equivalent work experience.
• 7+ years in privacy, information security, governance, risk and compliance roles.
• Experience with unified control frameworks, policy management, internal/external audit management, and data loss prevention.
• Experience with GRC technology (e.g., Archer, OpenPages).
• Knowledge of HIPAA and regulatory requirements for PHI/PII.

Responsibilities

• Develops and maintains privacy governance controls to minimize risk.
• Leads privacy training programs and awareness efforts.
• Oversees PHI/PII access and release controls.
• Coordinates third-party risk assessments and audits.
• Supports HIPAA compliance and regulatory requirements.

Skills

Privacy

Information Security

GRC

Risk Management

Auditing

Education

Bachelor's Degree in Information Technology or related field

Master's Degree or MBA

Tools

Archer

OpenPages

Job description

The Blue Cross Blue Shield Association seeks a privacy and information security leader to establish and maintain privacy governance across the enterprise, aligning with HIPAA and regulatory requirements.

You will lead training, incident response, third-party risk, and de-identification efforts, collaborate with BCBS entities, and help mature the privacy program and control framework across the organization.