Senior Privacy & Compliance Leader — Hybrid

001_BCBSA Blue Cross and Blue Shield Association; Chicago, Washington (IL, District of Columbia); Hybrid; USD 143,000 - 208,000; Full time

Benefits offered by this job

Annual bonus

Medical/dental/vision insurance

401(k) matching

Job summary

Blue Cross Blue Shield Association is seeking a senior privacy and information security leader to establish and govern privacy controls, lead investigations, and drive compliance across the enterprise. You will manage training, audits, and vendor risk while aligning with SOC2, NIST, and HITRUST frameworks.

A strong background in HIPAA and PHI protection is required. The role offers a competitive salary range and comprehensive benefits, with annual bonus eligibility and a culture of collaboration

Qualifications

• Bachelor's Degree in Information Technology or related field required.
• Master's Degree or MBA preferred.
• Experience with unified control frameworks, policy management, internal/external audit management, and data loss prevention.
• Experience with 3rd party risk management.
• Experience with GRC technology (Archer, OpenPages).
• Privacy, information security, governance, risk and compliance management experience.

Responsibilities

• Develops and maintains a privacy governance program and controls to minimize risk.
• Lead privacy investigations, incident response, and awareness training.
• Support IT control management, third party risk management, and SOC2/HITRUST alignment.
• Ensure regulatory compliance for HIPAA and other laws.
• Oversee de-identification, encryption, and access controls of PHI/PII.

Skills

Privacy governance

Information security

Risk management

GRC tooling

Project management

Vendor management

NIST compliance

HIPAA knowledge

Education

Bachelor's degree in IT or related field

Master's degree or MBA (preferred)

CIPP certification

Tools

Archer

OpenPages

Job description

Blue Cross Blue Shield Association is seeking a senior privacy and information security leader to establish and govern privacy controls, lead investigations, and drive compliance across the enterprise. You will manage training, audits, and vendor risk while aligning with SOC2, NIST, and HITRUST frameworks.

A strong background in HIPAA and PHI protection is required. The role offers a competitive salary range and comprehensive benefits, with annual bonus eligibility and a culture of collaboration