Senior Director, Compliance and Privacy Official

Blue Cross Blue Shield Association

110d • $173,188 - $283,639

About The Position

The Compliance and Privacy Official is responsible for providing strategic direction and oversight for the organization's corporate compliance and privacy programs, ensuring alignment with evolving healthcare regulations, industry standards, and internal policies. As a key advisor to executive leadership, the Board of Directors, and governance committees, the role fosters a culture of ethics, accountability, and transparency across the enterprise. The Compliance and Privacy Official leads a team of compliance and privacy professionals, driving continuous improvement and operational excellence. This role is critical for risk mitigation, regulatory readiness, and the development of policies and practices that safeguard patient and organizational data.

Requirements

• Bachelor's Degree or equivalent work experience.
• 12+ Years Experience in the healthcare industry with demonstrated knowledge of regulatory, privacy (HIPAA), and compliance and ethics issues.
• Proven ability to lead teams, drive organizational change, and influence cross-functional initiatives in complex environments.
• Deep understanding of healthcare compliance, privacy program administration, and data security technologies, including HIPAA and GDPR.
• Strong capability to assess regulatory and operational risks and develop effective mitigation strategies.
• Excellent analytical skills with sound business judgment, creativity, and initiative to solve complex problems.
• Advanced interpersonal and communication skills, including experience facilitating training and presenting to executive leadership and governance bodies.
• Ability to build and maintain credible relationships with internal and external stakeholders, including senior executives and board members.
• Skilled in strategic project planning and execution, with the ability to remain composed and tactful under pressure.
• Competent in Microsoft Office applications and other relevant compliance and privacy tools.
• Understanding of data security technologies and privacy program administration.

Nice To Haves

• Master's Degree in Law; Business Administration; or equivalents.
• Licensed Attorney (varies by state).
• Professional, Academy for Health Care Management (PAHM) - AHIP.
• Certified Information Privacy Professional (CIPP) - IAPP.

Responsibilities

• Oversee the organization’s Privacy Program, including HIPAA and GDPR compliance.
• Lead cross-functional efforts to investigate and resolve privacy incidents.
• Manage the Compliance and Ethics Program, including the Code of Business Conduct and annual reporting to leadership and the Board.
• Address compliance issues in collaboration with internal stakeholders.
• Serve as the subject matter expert for Medicare Part D and other government program compliance.
• Chair the MPDP Compliance Committee and report findings to senior leadership.
• Lead and develop a high-performing compliance and privacy team, fostering professional growth and a positive, inclusive work environment.
• Promote best practices and coordinate incident response efforts across the system.
• Oversee compliance and ethics training programs for Blue Plan Compliance leaders.

Benefits

• Paid time off
• 11 holidays
• Medical/dental/vision insurance
• Generous 401(k) matching
• Lifestyle spending account
• Annual bonus incentive pay

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: Bachelor's degree
• Number of Employees: 501-1,000 employees