Associate, Privacy

Summary

Join Oscar's Corporate Compliance team as an Associate, Privacy! This senior-level role focuses on privacy incident response and investigation involving PHI and PII. You will advise on complex privacy risks and ensure Oscar improves healthcare data management. Daily management of Oscar's records management program will also fall under your purview. This role reports to the VP, Chief Privacy Officer & Associate GC and offers a blended work culture with remote options. The base pay varies by location and includes additional benefits such as unlimited vacation and annual performance bonuses. This position requires a Bachelor's degree or equivalent experience and at least 3 years of experience in healthcare privacy programs.

Requirements

• Bachelor's degree or 4 years commensurate experience
• 3+ years of experience in healthcare privacy programs, including incident and breach investigations and responses
• 3+ years of experience with HIPAA and other federal and state Privacy laws and regulations applicable to the healthcare industry
• 3+ years of experience conducting Comprehensive Privacy investigations

Responsibilities

• Deliver daily operations of the privacy compliance program, including compliance with HIPAA, regulations promulgated thereunder, and state law
• Conduct and project manage risk analyses and assessments
• Provide opportunities for privacy improvement plans where required
• Understand federal and state privacy laws, HIPAA and state healthcare privacy-related laws and regulations
• Independently conduct investigations into reported or observed violations
• Communicate with team members concerning the importance of protecting Protected Health Information (PHI) and other sensitive information including Personally Identifiable Information (PII)
• Anticipate Privacy issues and initiate appropriate actions to ensure potential incidents are investigated thoroughly and following company policies and applicable laws and regulations
• Independently analyze and address all required breach determination and notification processes under HIPAA and applicable state breach rules and requirements in collaboration with others on the Privacy team and internal partners (IT Security, Legal)
• Proficiently draft multiple communications, including notification letters, risk assessments, incident response reports and regulatory responses
• Manage Privacy business process issues in collaboration with internal partners
• Support Privacy leadership in developing Privacy Training & Awareness materials
• Develop Oscar's records management program in collaboration with Privacy leadership
• Analyze and solution Privacy programs, issues, and concerns across the enterprise
• Compliance with all applicable laws and regulations
• Other duties as assigned

Preferred Qualifications

• Masters Degree or Juris Doctorate
• Privacy Certification from the International Associate of Privacy Professionals (IAPP)
• Experience documenting and implementing policies, procedures and guidelines
• Technical experience, including the ability to understand the technology landscape, identify opportunities, and overcome technical obstacles
• Experience navigating complex Privacy issues and identifying solutions
• Experience supporting a data privacy, security or equivalent function directly or indirectly for a large, regulated and matrixed organization
• Project/program management experience
• Experience directly or indirectly with IT Security, Compliance or similar function
• Experience with privacy principles and privacy operations

Benefits

• Medical, dental, and vision benefits
• 11 paid holidays
• Paid sick time
• Paid parental leave
• 401(k) plan participation
• Life and disability insurance
• Paid wellness time and reimbursements