Legal Compliance Senior Analyst

Cigna Healthcare•Bloomfield, CT

1d•$62,800 - $104,600

About The Position

The Legal Compliance Senior Analyst is a member of the Office of Privacy and Innovation Governance, responsible for researching, analyzing, and reporting on privacy incidents, including unauthorized disclosures and data breaches. The role works cross-functionally with business units and legal, compliance, and technology teams to identify root causes, implement corrective actions, and establish preventative measures that reduce organizational risk and support continuous improvement. The position ensures the integrity and reliability of incident data used in executive-level reporting, identifies recurring issues to inform risk mitigation strategies, evaluates preventative controls, and partners with operational leaders to promote privacy best practices. It also supports audits, privacy training, regulatory engagement, policy development, and strategic compliance objectives. The role provides dedicated, high-touch incident support for designated clients. It requires responsiveness and adaptability when potential or confirmed privacy incidents arise, including issuing preliminary and ongoing notifications in accordance with contractual requirements and established timelines. The anticipated annual salary range is $62,800–$104,600, depending on relevant factors including experience and geographic location. The role is anticipated to be eligible for an annual bonus plan. This is a business-funded role. Employees who work at home occasionally or permanently must have cable broadband or fiber-optic internet service with speeds of at least 10 Mbps download and 5 Mbps upload.

Requirements

Bachelor’s degree.
At least 3 years of Healthcare and/or PBM privacy and compliance experience.
Demonstrated competency in privacy incident management and risk assessment.
Strong analytical, communication, and interpersonal skills.
Proven ability to work cross-functionally and influence stakeholders.
Knowledge of State and Federal breach notification laws, including HIPAA.
Demonstrated competency with privacy management software and incident tracking tools.
Ability to manage multiple priorities in a fast-paced, matrixed environment and adapt to evolving regulatory requirements.

Responsibilities

Lead the research, management, and resolution of privacy issues presented to the Privacy Office.
Support and deliver privacy compliance training programs.
Perform auditing and monitoring activities to ensure ongoing adherence to regulatory requirements and internal policies.
Prepare and issue required notifications to clients, business partners, and government regulators in accordance with applicable laws.
Analyze privacy incident trends, identify emerging risks, and engage stakeholders to develop data-driven risk mitigation plans.
Assess potential and confirmed privacy incidents, determine appropriate resolutions, and coordinate timely response efforts.
Partner with internal departments to promote privacy best practices and oversee implementation of corrective actions.
Serve as a subject matter expert and privacy resource for internal and external partners.
Support strategic compliance initiatives, including internal audits, policy development, and employee training.
Provide dedicated, high-touch incident response support for designated clients, including prompt attention to potential or confirmed incidents and client-specific notification requirements.
Coordinate and issue time-sensitive preliminary and ongoing incident notifications to clients in accordance with contractual requirements and established notification timelines.
Maintain responsiveness and flexibility to address time-sensitive privacy incidents.