Privacy Manager
Our mission is to deliver high-quality primary care that is accessible, convenient and affordable for all. Every single day you’ll be working on challenging problems with an exceptional team to profoundly transform primary care and improve people’s quality of life.
This role allows you to work from anywhere you choose across the U.S. (excluding U.S. territories), with the flexibility to work from the Seattle HQ office as often as you’d like. Please note that no matter where you are located, all employees should be available during our core working hours from 10 am to 4 pm PT Monday through Friday.
Your role and impact
As a Privacy Manager, your experience in HIPAA and privacy compliance standards will play a critical role in supporting our commitment to maintaining an industry-leading privacy and data protection program. You will act as the Privacy Officer’s right-hand to collaborate cross-functionally to evolve privacy and data protection at 98point6 by supporting the delivery of key privacy initiatives within the company. You’ll also be responsible for collaborating with business stakeholders to balance real-world risks with business goals and drivers, such as speed, agility, flexibility and performance.
Responsibilities
- Provide subject-matter expertise required to support the 98point6 privacy and data protection program
- Collaborate with our innovative teams to integrate privacy-by-design considerations into all stages of the product and feature development and commercialization lifecycle
- Provide sound compliance advice based on current knowledge of relevant privacy and data protection obligations, including the Health Insurance Portability and Accountability Act (HIPAA), the California Consumer Privacy Act (CCPA), the Colorado Privacy Act (CPA), the Virginia Consumer Data Protection Act (VCDPA) and the privacy and data protection requirements of other global regions, such as Europe and Canada
- Maintain awareness of new laws, enforcement activity and other developments in the privacy domain
- Deliver employee training and facilitate discussion among key company stakeholders to relentlessly improve organizational privacy practices
- Support management of privacy incidents, breach evaluation, risk assessment, investigations and remediation activities
- Support compliance with privacy practices across the workforce, vendors and all business associates
- Support evaluation of budget and expenses associated with privacy and security initiatives and programs
- Monitor privacy compliance metrics and prepare periodic executive management reports regarding the 98point6 privacy and data protection program
- Serve as a point of contact for the 98point6 Compliance team and facilitate alignment with respect to privacy matters
Qualifications
- 5–7 years directly engaged in privacy compliance and/or related counseling; experience with health privacy and/or working for HIPAA covered entities and/or business associates preferred
- Strong knowledge and experience with HIPAA
- Strong experience in CCPA and GDPR; experience with additional global privacy laws preferred
- Strong problem-solving skills and creativity to add value and diversity of thought to our team
- Familiarity or experience working with information technology/security professionals and related systems, technologies and platforms preferred
- Familiarity or experience with SOC 2, ISO 27001, HITRUST, NIST or similar standards preferred
- Familiarity with risk management techniques when developing privacy management systems and investigating privacy incidents, e.g., the AHIMA privacy incident risk management techniques
- Professional certifications in privacy (CIPP, CIPM), auditing (CPMA) or equivalent preferred
98point6 provides equal employment opportunities to all without regard to race, color, religion, sex (including sexual orientation or gender identity), national origin, age, disability, genetic information or other protected status.