POSITION SUMMARY:
The Chief Privacy Officer (CPO) is responsible for developing, implementing, and overseeing Boston Medical Center Health Plan ("WellSense") privacy program for all products and states to ensure compliance with all applicable federal, state, and industry regulations governing the protection of personal health information (PHI) and sensitive data. This leader plays a key role in safeguarding the organization’s commitment to data privacy, upholding member trust, and minimizing privacy-related risks. The CPO will work closely with legal, compliance, IT, and operational teams to ensure adherence to data privacy laws and regulations, including HIPAA, HITECH, and other applicable standards. The position has supervisory responsibility and will oversee 1-2 direct reports.
Position: Chief Privacy Officer (CPO)
Department: Compliance
Schedule: Full Time (primarily remote/onsite for meetings or as needed)
ESSENTIAL RESPONSIBILITIES / DUTIES:
Privacy Program Leadership and Strategy:
Regulatory Compliance and Policy Development:
Risk Assessment and Mitigation:
Incident Response and Investigations:
Privacy Education, Training and Awareness:
Data Governance and Stakeholder Collaboration:
Monitoring and Reporting:
(The above statements in this job description are intended to depict the general nature and level of work assigned to the employee(s) in this job. The above is not intended to represent an exhaustive list of accountable duties and responsibilities required).
JOB REQUIREMENTS
EDUCATION:
Bachelor’s degree in law, healthcare administration, information management, or a related field required; Master’s degree or Juris Doctor (JD) preferred.
CERTIFICATES, LICENSES, REGISTRATIONS REQUIRED:
Certified Information Privacy Professional (CIPP), Certified in Healthcare Privacy Compliance (CHPC), or related certification required or the ability to obtain one within 6 months of your date
EXPERIENCE:
Minimum of 8-10 years of experience in privacy, data protection, and compliance, with at least 5 years in an executive leadership role in health insurance or healthcare required.
Minimum of 5 years’ experience managing teams in privacy, data protection, and compliance required
KNOWLEDGE, SKILLS & ABILITIES (KSAs):
Comprehensive understanding of privacy laws, regulations, and frameworks, including HIPAA, HITECH.
Experience with privacy risk assessment, incident response, and data governance best practices.
Strong analytical, strategic planning, and project management skills.
Excellent communication, leadership, and interpersonal skills, with the ability to effectively communicate privacy-related issues across all levels.
Equal Opportunity Employer/Disabled/Veterans
Thank you
Your information:
Thank you
Thank you
EEO & Accommodation Statement
Boston Medical Center is an equal employment/affirmative action employer. We ensure equal employment opportunities for all, without regard to race, color, religion, sex, national origin, age, disability, veteran status, sexual orientation, gender identity and/or expression or any other non-job-related characteristic.
If you need accommodation for any part of the application process because of a medical condition or disability, please send an e-mail to Talentacquisition@bmc.org or call 617-638-8582 to let us know the nature of your request
E-Verify Program
Boston Medical Center participates in the Electronic Employment Verification Program. As an E-Verify employer, prospective employees of BMC must complete a background check and receive medical clearance before beginning their employment at the hospital.
Federal Trade Commission Statement:
According to the FTC, there has been a rise in employment offer scams. Our current job openings are listed on our website and applications are received only through our website. We do not ask or require downloads of any applications, or “apps” job offers are not extended over text messages or social media platforms. We do not ask individuals to purchase equipment for or prior to employment. To avoid becoming a victim of an employment offer scam, please follow these tips from the FTC: FTC Tips
Thank you
Before you go, don't forget to join our talent community!
Thank you
We use cookies to make your interactions with our website more meaningful. They help us better understand how our websites are used, so we can tailor content for you. For more information about the different cookies we are using, read the Privacy Statement. By continuing to navigate the site, you agree to the use of cookies on our behalf.