Director, Privacy and HIPAA Compliance

Fidelity Investments • Boston, MA

9d • $103,000 - $211,000

About The Position

As a Director in Fidelity’s Workplace Investing Compliance Office and a key member of its Data Compliance Team, you will advise and partner with Workplace Investing and related healthcare-focused businesses to implement and maintain a risk-based compliance program addressing HIPAA, privacy, health data, and broader data compliance requirements. You will serve as a primary compliance resource for governance and safeguarding of PHI, PII, and other sensitive data, and represent Compliance on data governance and privacy-related committees. The role influences strategic decisions about products, processes, and technology, including compliance oversight of AI- and data-driven solutions and consideration of legal, regulatory, privacy, governance, transparency, and risk management requirements throughout the data lifecycle.

You will work with partners across Legal, Risk, Privacy, Technology, Data Governance, Vendor Management, Product, Security, and Contracts to lead compliance initiatives, support regulatory organizational change, advise on complex privacy and health data matters, and promote consistent compliance practices. The position includes regular engagement with senior leadership to inform decisions and support protection of customer, participant, and employee information. You will also maintain compliance programs and respond to client and data subject requests related to privacy and data protection.

The role provides proactive compliance oversight, regulatory guidance, and HIPAA and privacy subject matter expertise to help Fidelity maintain effective compliance programs, support business initiatives, and responsibly handle sensitive health and personal information.

Requirements

• Bachelor’s degree required.
• Strong knowledge of federal and state laws, regulations, and agencies governing the supported business lines.
• Strong interpersonal and influencing skills, including the ability to collaborate effectively across organizational levels and deliver results.
• Excellent verbal and written communication skills, including the ability to present complex information clearly through multiple channels.
• Ability to identify, analyze, and resolve problems independently and escalate matters when appropriate.
• Ability to respond effectively to shifting priorities while maintaining progress on regularly scheduled work.
• Familiarity with Microsoft Office applications, SharePoint, and eReview.

Nice To Haves

• Advanced degree and/or JD.
• Experience in financial services or healthcare services.
• Experience with privacy and data protection regulations.
• Experience in compliance, data lifecycle management, and/or risk management.

Responsibilities

• Advise and partner with Workplace Investing and related healthcare-focused businesses on implementing and maintaining compliance programs for HIPAA, privacy, health data, and broader data compliance requirements.
• Provide compliance guidance on governance and safeguarding of PHI, PII, and other sensitive data.
• Represent Compliance on data governance and privacy-related committees and influence strategic product, process, and technology decisions.
• Provide compliance oversight and guidance for AI- and data-driven solutions, including consideration of applicable legal, regulatory, privacy, governance, transparency, and risk management requirements.
• Help ensure regulatory obligations are considered throughout the data lifecycle.
• Lead compliance initiatives and support regulatory organizational change in collaboration with internal partners.
• Maintain compliance programs and respond to client and data subject requests related to privacy and data protection.
• Provide compliance advice and support on data management, protection, and privacy.
• Assist business partners in maintaining controls to protect personally identifiable and health data across WI and HCG.
• Establish and maintain an inventory of Workplace Business activities involving PHI, PII, or other sensitive data, providing an enterprise view.
• Provide compliance risk management support to legal entities; monitor, review, and disseminate new laws, regulations, and other guidance.
• Provide decision support to resolve compliance issues in the business.
• Draft and review policies and procedures for compliance content.
• Develop executive reporting to increase transparency and measure program health.
• Engage senior-level management to inform and influence product and process decisions and support compliance.

Benefits

• Comprehensive health care coverage
• Emotional well-being support
• Retirement benefits
• Paid time off
• Parental leave
• Charitable giving employee match program
• Educational assistance, including student loan repayment and tuition reimbursement
• Learning resources for career development
• Bonus or other variable compensation may be included depending on position and eligibility requirements

What This Job Offers

• Job Type: Full-time
• Career Level: Director