Legal Compliance Senior Analyst

The Cigna Group•Remote,

1d•$62,800 - $104,600

About The Position

The Legal Compliance Senior Analyst is a member of the Office of Privacy and Innovation Governance who researches, analyzes, and reports on privacy incidents, including unauthorized disclosures and data breaches. The role collaborates with business units and legal, compliance, and technology teams to identify root causes, implement corrective actions, and establish preventative measures to reduce organizational risk and support continuous improvement. The analyst ensures the integrity and reliability of incident data used for executive reporting, identifies recurring issues to inform risk mitigation, evaluates preventative controls, and works with operational leaders to promote privacy best practices and implement corrective actions. The position also supports audits, privacy training, regulatory engagement, policy development, and other strategic compliance objectives. The role provides dedicated, high-touch incident support for designated clients. It requires responsiveness, adaptability, and urgency in responding to potential or confirmed incidents, including coordinating time-sensitive preliminary and ongoing notifications in accordance with contractual requirements and established timelines. The position requires a bachelor's degree and at least three years of healthcare and/or PBM privacy and compliance experience. The anticipated annual salary is $62,800–$104,600, depending on relevant factors such as experience and geographic location. The role is anticipated to be eligible for an annual bonus plan. This is a business-funded role. If working from home occasionally or permanently, the internet connection must be cable broadband or fiber optic with speeds of at least 10 Mbps download and 5 Mbps upload.

Requirements

Bachelor's degree.
At least 3 years of healthcare and/or PBM privacy and compliance experience.
Demonstrated competency in privacy incident management and risk assessment.
Strong analytical, communication, and interpersonal skills.
Proven ability to work cross-functionally and influence stakeholders.
Knowledge of state and federal breach notification laws, including HIPAA.
Demonstrated competency with privacy management software and incident tracking tools.
Ability to manage multiple priorities in a fast-paced, matrixed environment and adapt to evolving regulatory requirements.
For occasional or permanent home work, cable broadband or fiber optic internet service with at least 10 Mbps download and 5 Mbps upload.

Responsibilities

Lead the research, management, and resolution of privacy issues presented to the Privacy Office.
Support and deliver privacy compliance training programs and perform auditing and monitoring to ensure adherence to regulatory requirements and internal policies.
Prepare and issue required notifications to clients, business partners, and government regulators in accordance with applicable laws.
Analyze privacy incident trends, identify emerging risks, and engage stakeholders to develop data-driven risk mitigation plans.
Assess potential and confirmed privacy incidents, determine appropriate resolutions, and coordinate timely response efforts.
Partner with internal departments to promote privacy best practices and oversee implementation of corrective actions.
Serve as a subject matter expert and privacy resource for internal and external partners.
Support strategic compliance initiatives, including internal audits, policy development, and employee training.
Provide dedicated, high-touch incident response support for designated clients, addressing potential or confirmed incidents and client-specific notification requirements.
Coordinate and issue time-sensitive preliminary and ongoing incident notifications to clients in accordance with contractual requirements and established timelines.
Maintain responsiveness and flexibility in addressing time-sensitive privacy incidents.
Ensure the integrity and reliability of incident data used for executive-level reporting and support identification of recurring issues.
Evaluate the effectiveness of preventative controls and work with operational leaders on corrective actions.