Director, Privacy and HIPAA Compliance

Fidelity • Boston, MA

2d • Onsite

About The Position

As a Director, Compliance in the Workplace Investing Compliance Office, you will be part of a team of compliance professionals helping to invent the future of Fidelity by supporting a wide array of initiatives providing better ways for employers to successfully manage employee benefits, and for customers to manage their financial and healthcare needs. You will be providing guidance to business partners on the key rules and regulations that must be followed when building innovative solutions for our clients and customers. The Role As a key member of the Data Compliance Team within the Workplace Investing Compliance Office, you will advise and partner with Fidelity's Workplace Investing and related healthcare-focused businesses to implement and maintain a strong, risk-based compliance program addressing HIPAA, privacy, health data, and broader data compliance requirements. You will function as a primary compliance resource for the governance and safeguarding of PHI, PII, and other critical data. You will represent Compliance on data governance and privacy-related committees, influence strategic decisions related to products, processes, and technology solutions, which includes providing compliance oversight and guidance on AI- and data-driven solutions, helping ensure that AI and ADMT use cases appropriately address applicable legal, regulatory, privacy, governance, transparency, and risk management requirements, and help ensure regulatory obligations are appropriately considered throughout the data lifecycle. Working closely with partners in Legal, Risk, Privacy, Technology, Data Governance, Vendor Management, Product, Security, and Contracts, you will lead compliance initiatives, support regulatory organizational change, advise on sophisticated privacy and health data matters, and help drive consistent and balanced compliance practices throughout the company. This position involves regular engagement with senior leadership to advise decision-making and support Fidelity's dedication to protecting customer, participant, and employee information. As part of WI Compliance Office, you will advise and work with Fidelity’s Workplace Investing business to implement and maintain a strong, effective compliance program designed to address Data Compliance regulations. You will represent Compliance on data governance committees and influence decisions for WI strategic initiatives. You will work closely with partners in Legal, Risk, Contracts, Privacy, Data, Technology, Vendor and Product to lead compliance initiatives, maintain compliance programs and respond to client and data subject requests related to Privacy and Data Protection. In this role you will engage with senior level management to inform and influence key product and process decisions to help ensure compliance. By providing proactive compliance oversight, strategic regulatory guidance, and subject matter expertise in HIPAA and privacy, you will help ensure Fidelity maintains effective compliance programs, supports key business initiatives, and responsibly handles sensitive health and personal information in an increasingly complex regulatory landscape.

Requirements

• Bachelor’s degree required
• Experience in financial services, or healthcare services preferred.
• Experience in Privacy and Data Protection regulations preferred.
• Experience in compliance, data lifecycle management, and/or risk management preferred.
• Strong knowledge of federal and state laws, regulations, and agencies governing business lines supported.
• Strong interpersonal and influencing skills, including ability to collaborate effectively across all levels of the organization, to deliver results.
• Excellent verbal and written communications skills - ability to present ideas and complex information clearly and effectively through multiple channels.
• Proven track record to identify, analyze and resolve problems independently, and escalate matters when appropriate.
• Ability to respond effectively to shifting priorities while maintaining progress of regularly scheduled work.
• Microsoft Office suite of applications, SharePoint, and eReview are some of the many tools in your toolbox.

Nice To Haves

• advanced degree and/or JD preferred.
• Experience in financial services, or healthcare services preferred.
• Experience in Privacy and Data Protection regulations preferred.
• Experience in compliance, data lifecycle management, and/or risk management preferred.

Responsibilities

• Providing compliance advice and support on data management, protection and privacy.
• Assisting business partners with maintaining strong controls to protect personally identifiable and health data across WI and HCG.
• Establishing and maintaining an inventory of activities across the Workplace Business that have a PHI, PII, and otherwise sensitive nexus, providing a comprehensive and enterprise view.
• Providing compliance risk management support to legal entities.
• Monitoring, reviewing, and disseminating requirements of new laws, regulations and other guidance.
• Providing decision support to resolve compliance issues that arise in the business.
• Drafting and reviewing policies and procedures for specific compliance content.
• Developing enhanced executive reporting driving transparency and measurement of program health.

Benefits

• comprehensive health care coverage and emotional well-being support
• market-leading retirement
• generous paid time off and parental leave
• charitable giving employee match program
• educational assistance including student loan repayment, tuition reimbursement, and learning resources to develop your career

What This Job Offers

• Job Type: Full-time
• Career Level: Director