Senior Privacy Program Specialist (HIPAA)

Westchester Medical Center Health Network; Town of Mount Pleasant (NY); On-site; USD 120,000 - 160,000; Full time

Job summary

Westchester Medical Center Health Network is seeking a Senior Privacy Specialist to lead advanced privacy efforts, protect patient information, and ensure HIPAA compliance across the network. This role reports to the Director of Privacy Program and collaborates with clinical, IT, legal, and compliance teams.

The ideal candidate will manage complex privacy risk assessments, develop policies, and mentor staff while supporting audits and privacy initiatives to uphold regulatory adherence and

Qualifications

• 3 years of experience in compliance or regulatory management in a large healthcare facility.
• Bachelor’s degree in Business, Accounting, Finance, Healthcare Administration, or a related field, required.
• Master’s degree in Business, Accounting, Finance, Healthcare Administration, or a related field, preferred.
• Certified in Healthcare Privacy Compliance (CHPC) and Certified in Healthcare Compliance (CHC), required.

Responsibilities

• Lead advanced privacy risk assessments and develop mitigation strategies to protect patient information and ensure regulatory compliance across the network.
• Develop, update, and maintain privacy policies, procedures, and HIPAA manuals in alignment with current laws and best practices.
• Coordinate and conduct complex privacy investigations, including breach response and reporting, ensuring timely resolution and compliance with regulatory requirements.
• Design and deliver targeted privacy training and awareness programs for staff at all levels to promote a strong culture of privacy throughout the network.
• Serve as a subject‑matter expert on privacy regulations, providing guidance and support to clinical, IT, legal, and compliance teams on privacy‑related issues.
• Mentor and support junior privacy staff, fostering their professional development and ensuring consistent application of privacy policies and procedures.
• Collaborate with multidisciplinary teams to implement privacy safeguards within clinical and technical environments.
• Monitor and analyze privacy compliance trends and audit findings, recommending and supporting corrective actions as needed.
• Assist and support the Director of Privacy Program with planning, coordination, and execution of privacy audits across the network.
• Assist the Director of Privacy Program in strategic planning and implementation of network‑wide privacy initiatives.
• Ensure documentation and reporting of privacy incidents, audit outcomes, and compliance activities for internal and external stakeholders.
• Perform other duties as assigned.

Education

Bachelor’s degree in Business, Accounting, Finance, Healthcare Administration, or a related field

Master’s degree in Business, Accounting, Finance, Healthcare Administration, or a related field

Job description

The Senior Privacy Specialist leads advanced efforts to protect patient information and ensure compliance with HIPAA and other privacy regulations across the WMC Health Network. Reporting to the Director of Privacy Program, this role manages complex privacy risk assessments, policy development, staff training, and investigations while serving as a subject‑matter expert and mentor. Collaborating closely with clinical, IT, legal, and compliance teams, the Senior Privacy Specialist supports the network’s overall privacy program and helps maintain regulatory adherence and patient trust.

Responsibilities

• Lead advanced privacy risk assessments and develop mitigation strategies to protect patient information and ensure regulatory compliance across the network.
• Develop, update, and maintain privacy policies, procedures, and HIPAA manuals in alignment with current laws and best practices.
• Coordinate and conduct complex privacy investigations, including breach response and reporting, ensuring timely resolution and compliance with regulatory requirements.
• Design and deliver targeted privacy training and awareness programs for staff at all levels to promote a strong culture of privacy throughout the network.
• Serve as a subject‑matter expert on privacy regulations, providing guidance and support to clinical, IT, legal, and compliance teams on privacy‑related issues.
• Mentor and support junior privacy staff, fostering their professional development and ensuring consistent application of privacy policies and procedures.
• Collaborate with multidisciplinary teams to implement privacy safeguards within clinical and technical environments.
• Monitor and analyze privacy compliance trends and audit findings, recommending and supporting corrective actions as needed.
• Assist and support the Director of Privacy Program with planning, coordination, and execution of privacy audits across the network.
• Assist the Director of Privacy Program in strategic planning and implementation of network‑wide privacy initiatives.
• Ensure documentation and reporting of privacy incidents, audit outcomes, and compliance activities for internal and external stakeholders.
• Perform other duties as assigned.

Qualifications/Requirements

Experience

• 3 years of experience in compliance or regulatory management in a large healthcare facility, required.

Education

• Bachelor’s degree in Business, Accounting, Finance, Healthcare Administration, or a related field, required.
• Master’s degree in Business, Accounting, Finance, Healthcare Administration, or a related field, preferred.

Licenses / Certifications

• Certified in Healthcare Privacy Compliance (CHPC) and Certified in Healthcare Compliance (CHC), required.

Other

• Confidentiality: It is an expectation that all employees at Westchester Medical Center Health Network will protect the confidentiality of all patient care, personnel, and business/financial information.
• Compliance: Employees will complete required competencies, annual mandatory training requirements and adhere to the code of conduct as described in the Westchester Medical Center Health Network Compliance Plan and brochure.
• Disclaimer: The above statements are intended to describe the general nature and level of work being performed. They are not intended to be construed as an exhaustive list of all responsibilities, duties and skills required of personnel so classified.

Special Requirements

• Knowledgeable in HIPAA, and Federal and State regulations for hospitals & physician practices.
• Planning and conducting effective, confidential investigations.