Senior Privacy Program Specialist (HIPAA)

Job Summary:

The Senior Privacy Specialist leads advanced efforts to protect patient information and ensure compliance with HIPAA and other privacy regulations across the WMC Health Network. Reporting to the Director of Privacy Program, this role manages complex privacy risk assessments, policy development, staff training, and investigations while serving as a subject-matter expert and mentor. Collaborating closely with clinical, IT, legal, and compliance teams, the Senior Privacy Specialist supports the network’s overall privacy program and helps maintain regulatory adherence and patient trust.

Responsibilities:

• Lead advanced privacy risk assessments and develop mitigation strategies to protect patient information and ensure regulatory compliance across the network.
• Develop, update, and maintain privacy policies, procedures, and HIPAA manuals in alignment with current laws and best practices.
• Coordinate and conduct complex privacy investigations, including breach response and reporting, ensuring timely resolution and compliance with regulatory requirements.
• Design and deliver targeted privacy training and awareness programs for staff at all levels to promote a strong culture of privacy throughout the network.
• Serve as a subject-matter expert on privacy regulations, providing guidance and support to clinical, IT, legal, and compliance teams on privacy-related issues.
• Mentor and support junior privacy staff, fostering their professional development and ensuring consistent application of privacy policies and procedures.
• Collaborate with multidisciplinary teams to implement privacy safeguards within clinical and technical environments.
• Monitor and analyze privacy compliance trends and audit findings, recommending and supporting corrective actions as needed.
• Assist and support the Director of Privacy Program with planning, coordination, and execution of privacy audits across the network.
• Assist the Director of Privacy Program in strategic planning and implementation of network-wide privacy initiatives.
• Ensure documentation and reporting of privacy incidents, audit outcomes, and compliance activities for internal and external stakeholders.
• Perform other duties as assigned.

Qualifications/Requirements:

Experience:

• 3 years of experience in compliance or regulatory management in a large healthcare facility, required.

Education:  

• Bachelor’s degree in Business, Accounting, Finance, Healthcare Administration, or a related field, required.
• Master’s degree in Business, Accounting, Finance, Healthcare Administration, or a related field, preferred.

Licenses / Certifications:  

• Certified in Healthcare Privacy Compliance (CHPC) and Certified in Healthcare Compliance (CHC), required.

Other: 

• Confidentiality:  It is an expectation that all employees at Westchester Medical Center Health Network will protect the confidentiality of all patient care, personnel, and business/financial information. 
• Compliance:  Employees will complete required competencies, annual mandatory training requirements and adhere to the code of conduct as described in the Westchester Medical Center Health Network Compliance Plan and brochure.  
• Disclaimer:  The above statements are intended to describe the general nature and level of work being performed.  They are not intended to be construed as an exhaustive list of all responsibilities, duties and skills required of personnel so classified.

Special Requirements:

• Knowledgeable in HIPAA, and Federal and State regulations for hospitals & physician practices.
• Planning and conducting effective, confidential investigations.