Senior Privacy & Compliance Leader (Hybrid)

Blue Cross and Blue Shield of Kansas Inc.; Chicago (IL); Hybrid; USD 143,000 - 208,000; Full time

Benefits offered by this job

Paid time off

11 holidays

Medical/dental/vision insurance

401(k) matching

Lifestyle spending account

Job summary

Blue Cross and Blue Shield Association is seeking a Privacy and Information Security leader to establish and maintain governance, controls, and training across the organization. The role supports HIPAA compliance, risk management, and third-party oversight while driving privacy initiatives and incident response.

You will collaborate with BCBS organizations to share best practices, oversee de-identification and encryption efforts for PHI/PII, and ensure alignment with NIST, SOC2, HITRUST

Qualifications

• Must understand legal and regulatory requirements in healthcare privacy incl. HIPAA.
• Experience with unified control frameworks, policy management, internal/external audits.
• Experience with data loss prevention and 3rd party risk management.

Responsibilities

• Develops and maintains privacy governance and compliance controls.
• Establishes privacy processes, policies, standards and procedures to minimize risk.
• Maintains training program for privacy and information security awareness.

Skills

Privacy governance

HIPAA knowledge

GRC experience

Vendor management

Project management

Education

Bachelor's Degree Information Technology or related field

Master's Degree or MBA

Tools

Archer

OpenPages

Job description

Blue Cross and Blue Shield Association is seeking a Privacy and Information Security leader to establish and maintain governance, controls, and training across the organization. The role supports HIPAA compliance, risk management, and third-party oversight while driving privacy initiatives and incident response.

You will collaborate with BCBS organizations to share best practices, oversee de-identification and encryption efforts for PHI/PII, and ensure alignment with NIST, SOC2, HITRUST