Privacy Program Specialist, Principal - Stellarus
About The Position
The Privacy Program Specialist, Principal works in the Stellarus Privacy Office, which is part of the legal organization and oversees the companies’ privacy program. The role helps ensure compliance with applicable privacy laws, business associate agreements, and health plan client obligations while supporting privacy by design, appropriate data handling, privacy-risk monitoring, and privacy incident response. Reporting to the Chief Compliance & Privacy Officer, the specialist helps shape and strengthen the privacy program by translating complex requirements into practical guidance and processes, partnering across the organization to manage privacy risks, embedding privacy into business initiatives, and supporting responsible data use. The position also supports a culture of privacy, accountability, and compliance.
Requirements
- Bachelor’s degree, or a high school diploma/GED plus four years of additional relevant experience in lieu of a degree.
- 10 years of prior relevant experience.
- Extensive experience in healthcare, legal services, privacy, audit, or investigative services.
- Mastery-level knowledge and understanding of state and federal privacy laws, including HIPAA/HITECH, CMIA, and privacy-related consumer protection laws such as the Telephone Consumer Protection Act (TCPA).
Nice To Haves
- Privacy certification such as CHPC, CIPP/US, or similar credentials.
- Experience working in a healthcare technology environment.
- Experience with privacy by design, product privacy, data governance, or privacy technology.
Responsibilities
- Serve as an operational partner to the Chief Privacy Officer in administering and continuously improving the privacy program, including governance, compliance oversight, risk management, stakeholder engagement, and day-to-day operations.
- Oversee compliance with federal and state privacy laws, including HIPAA and the HITECH Act.
- Implement, interpret, operationalize, support, and enforce the Privacy Program; assist with updates needed or required by law; support best practices for protecting client members’ protected health information; and promote a culture that values privacy compliance.
- Lead development and implementation of privacy policies, advisory guides, governance and accountability documents, and communication and educational tools.
- Respond to complex privacy complaints and incidents, lead escalated investigations, document case files, direct root-cause analysis, address mitigation, and work with business units on corrective actions and remediation.
- Respond to escalated and complex privacy-related inquiries.
- Conduct privacy reviews of vendors, subcontractors, business partners, and data-sharing arrangements, including HIPAA Business Associate Agreements and other contractual privacy requirements, in partnership with Legal and business stakeholders.
- Monitor developments in privacy laws, regulations, and industry practices, and coordinate required program updates and process improvements.
- Conduct and support privacy compliance monitoring, risk assessments, audits and audit responses, regulatory inquiries, corrective action plans, and maintenance of program documentation, reporting metrics, tracking systems, and compliance evidence.
- Partner with Information Security, Compliance, Legal, and other stakeholders to address privacy and data protection risks, support enterprise compliance initiatives, and promote a culture of privacy and compliance.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
