Senior Privacy Biostatistician - Risk Analytics

Truveta•Seattle, WA

1d•$145,000 - $150,000•Remote

About The Position

Truveta is seeking a senior statistical privacy expert to lead disclosure-risk strategy across complex health-data modalities, including structured data, imaging, clinical notes, and emerging modalities such as genomic data. The position is based at Truveta’s headquarters in the Greater Seattle area and is listed as remote. The Senior Privacy Biostatistician reports to the Senior Director of Risk Analytics and independently leads statistical disclosure control strategy for complex, high-visibility, and novel-modality data products. Where individually qualified, the role signs Expert Determinations under 45 CFR §164.514(b)(1), applying generally accepted statistical and scientific principles to determine that re-identification risk is very small and documenting the reasoning to withstand audit. The role also establishes methodological standards, mentors and supervises Privacy Biostatisticians working toward signing authority, and represents Truveta’s privacy rigor to partners and regulators. The successful candidate will help balance data utility and usability with residual risk and mitigating controls across the platform. This includes developing profile-level risk-justification methods, addressing modality-specific risks with clinical informatics and Legal, and incorporating Truveta’s HIPAA Security Rule posture into Privacy Rule risk determinations in partnership with security leadership. Recipient-side controls may supplement determinations for higher-risk modalities, but do not replace the statistical very-small-risk determination. Truveta describes itself as a health-provider-led data platform with a mission to enable researchers to find cures faster, empower clinicians, and help families make informed care decisions. It offers meaningful work, benefits, professional development, flexible work arrangements, parental leave, and regular team activities. The posted base-pay range is $150,000 to $145,000; the posting notes that compensation depends on factors including location and job-related knowledge, skills, and experience, and that certain roles may receive incentive pay and stock options. Applicants must be authorized to work in the United States; the company is unable to sponsor work visas or permits at this time.

Requirements

Master’s degree in biostatistics, statistics, epidemiology, or a related quantitative field; a PhD is a plus.
At least 6 years of experience applying statistical methods to patient health information, including significant hands-on statistical disclosure control experience; alternatively, demonstrated equivalent competency through an accelerated, documented case history.
Demonstrated and documentable experience applying de-identification methodology to real datasets.
Deep experience with at least one non-structured data modality, such as imaging or clinical notes, in addition to structured EHR or claims data.
Ability to reason across the HIPAA Privacy Rule and Security Rule boundary when estimating risk.
Excellent written and verbal communication skills, including the ability to produce documentation that stands alone under audit.
Ability to mentor junior technical staff.
Authorization to work in the United States for any employer; Truveta cannot sponsor work visas or permits.

Nice To Haves

Prior formal Expert Determination signing experience, internally or as an external consultant or expert witness.
Experience analyzing risk across linked data modalities.
Experience with process Expert Determinations.
Hands-on experience with statistical disclosure control tools such as sdcMicro and dynamic or continuously revalidated risk methodologies.
Working familiarity with clinical informatics standards, including HL7, FHIR, and DICOM PS3.15 Annex E.
Exposure to genomic data privacy considerations, such as VCF-level re-identification risk and familial risk.
Experience analyzing Real World Data in a research setting.
Evidence of participation in publications, studies, or reports.
PhD in a related quantitative field.

Responsibilities

Independently design and lead statistical disclosure control strategies for complex, high-dimensional, and multimodality health datasets, including structured data, imaging, clinical notes, and emerging modalities such as genomic data.
When qualified, serve as a signing Expert Determiner, applying generally accepted statistical and scientific principles to determine that re-identification risk is very small and documenting the rationale to withstand audit.
Own profile-level risk-justification methodology, including dynamic k-anonymity thresholds, quasi-identifier importance ranking, suppression hierarchies, and drift-triggered re-determination thresholds.
Partner with clinical informatics and other teams on modality-specific risk, and with Legal on emerging modalities such as genomic data.
Incorporate Truveta’s HIPAA Security Rule posture into Privacy Rule risk determinations and partner with security leadership on infrastructure and regulatory changes.
Mentor and supervise Privacy Biostatisticians building toward independent signing authority, co-sign their work, and maintain documentation of their case history.
Partner with Legal and Contracts on supplementary recipient-side controls for higher-residual-risk modalities and incorporate these controls into determinations, while ensuring they are not treated as substitutes for the statistical very-small-risk determination.
Drive continual improvements in data utility and usability while managing residual risk and mitigating controls across the platform.