Privacy Manager

SCAN Health Insurance • Long Beach, CA

1d • $106,200 - $153,705 • Remote

About The Position

The Privacy Manager, under the direction of the Chief Privacy Officer, manages assigned operational activities supporting SCAN’s enterprise privacy program across health plans and affiliated health care entities. The role translates federal and state privacy requirements into practical procedures and controls, coordinates privacy risk and incident activities, and supports privacy by design in business operations, data use, artificial intelligence, analytics, and technology initiatives. The Manager collaborates with Legal, Compliance, Information Security, IT, Data, Clinical, Product, Marketing, Human Resources, Procurement, and business teams to protect individuals, support responsible innovation, and promote privacy accountability.

The position supports the organization’s Vision and Goals and may perform other duties as assigned. SCAN is a nonprofit health organization serving older adults across multiple states. This role is mostly remote.

Requirements

• Bachelor’s degree in Healthcare Administration, Law, Business, or a related field, or equivalent experience.
• At least 5 years of progressively responsible experience in privacy, compliance, information security, legal, health care operations, data governance, or a related field.
• Demonstrated experience implementing privacy and security requirements, conducting privacy reviews and investigations, assessing privacy and regulatory risks, supporting incident response, and coordinating cross-functional initiatives.
• Strong project management, organization, and change implementation capabilities.
• Strong written and verbal communication, influence, and cross-functional collaboration skills.
• Ability to interpret complex legal and technical requirements and convert them into practical operational controls.
• Ability to prioritize multiple regulatory, operational, incident, technology, and project-based assignments.
• Ability to handle sensitive and confidential information with discretion and maintain defensible documentation.
• Curiosity about AI and its potential to transform operations and member service.

Nice To Haves

• Strong knowledge of HIPAA, HITECH, 42 CFR Part 2, state medical privacy and breach notification laws, comprehensive state consumer privacy laws, and emerging consumer health data and AI requirements.
• Experience applying privacy-by-design principles, evaluating emerging technologies including AI, and supporting compliance with healthcare privacy and security regulations.
• CHPC, CIPP/US, CIPM, AIGP, or a comparable privacy or compliance credential.
• At least 8 years of experience in privacy, compliance, legal, data governance, information security, or a related field, particularly in health care, health insurance, digital health, or another highly regulated industry.
• Practical experience with privacy impact assessments, data inventories, individual rights, vendor oversight, incident response, regulatory inquiries, online tracking technologies, AI governance, and privacy-enhancing controls.
• Familiarity with the NIST Privacy Framework, NIST AI Risk Management Framework, HITRUST, SOC 2, ISO standards, or similar frameworks.

Responsibilities

• Manage day-to-day privacy program activities for SCAN health plans and affiliated health care entities, implementing established processes, controls, standards, and documentation.
• Perform and coordinate privacy impact assessments, risk assessments, audits, and gap analyses for products, vendors, technologies, data uses, and business changes; maintain risk register entries, track remediation, and escalate significant issues.
• Draft, update, and implement privacy policies, procedures, notices, standards, and operational guidance under Privacy leadership direction.
• Conduct and coordinate monitoring and auditing related to privacy requirements, access, minimum necessary use, retention, data sharing, and individual rights; prepare metrics, dashboards, and materials for leadership, committees, audits, and regulatory inquiries.
• Advise and collaborate with cross-functional teams to incorporate privacy requirements into projects, systems, contracts, digital experiences, communications, and operational workflows.
• Manage assigned privacy incident intake, investigation, risk assessment, documentation, mitigation, and closure; coordinate corrective actions, support notifications and regulatory responses, maintain defensible records, and escalate potential breaches or material issues.
• Assist with privacy reviews of AI, machine learning, automated decision systems, ambient technologies, online tracking technologies, and advanced analytics; evaluate data sources, intended uses, transparency, human oversight, vendor practices, retention, secondary use, and individual impact, and recommend safeguards and monitoring.
• Develop and deliver role-based training, practical guidance, communications, and awareness materials; support a culture of accountability, member trust, and responsible innovation.
• Manage or support operational processes for data minimization, retention and deletion, individual privacy rights, consent and preference management, and third-party data sharing.
• Assist with privacy reviews of vendors, contracts, data use agreements, business associate arrangements, and higher-risk processing activities; escalate complex issues as appropriate.
• Actively support the achievement of SCAN’s Vision and Goals and perform other duties as assigned.

Benefits

• Annual employee bonus program
• Robust Wellness Program
• Generous paid time off, 11 paid holidays per year, 1 floating holiday, birthday off, and 2 volunteer days
• 401(k) retirement savings plan with employer match
• Employee recognition program
• Tuition reimbursement
• Opportunity to join a team that makes a difference to members and the community

What This Job Offers

• Job Type: Full-time
• Career Level: Manager