Senior Privacy Analyst

Surescripts serves the nation through simpler, trusted health intelligence sharing, in order to increase patient safety, lower costs and ensure quality care. We deliver insights at critical points of care for better decisions - from streamlining prior authorizations to delivering comprehensive medication histories to facilitating messages between providers.

Job Summary:

Applies practical knowledge of privacy to research privacy issues, track privacy legislation, regulations, standards, and controls. Relies on strong interpersonal communication skills to interact with business leaders, product owners and developers, and members of the legal team. Uses cross-functional collaboration and task management skills to support the Privacy Officer, conducting privacy program operations, assisting in program maturation and strategy, and related reporting. Timely communicates with and updates the Privacy Officer and other team members on new matters, challenges, and status.

• Tracking and conducting legal research and analysis of privacy requirements arising under privacy legislation, regulation, and published standards and controls
• Supporting the company's compliance with federal and state privacy legislation and regulation, company privacy policies and procedures, and published privacy standards and controls
• Supporting the development and maintenance of privacy policies and related implementation guidance that guide workforce behaviors
• Maintaining electronic records and other privacy program documentation to demonstrate program operations
• Supporting privacy education initiatives, such as training obligations, awareness activities and specialized privacy outreach
• Assisting in the development and maintenance of privacy content for the company's privacy intranet
• Managing the Privacy Office's processing of requests relating to individual participation, such as access, amendment, deletion, restriction, and the like, including interfacing with leaders in Marketing, Human Resources, and Product Innovation
• Providing privacy support for security incident response, triaging privacy incident investigation and supporting the Privacy Office in related breach response
• Developing and supporting the completion of privacy risk assessments, including tracking risks in risk register
• Developing Privacy Program metrics and preparing period reports
• Supporting Litigation function as it relates to processing subpoenas, mentoring administrative staff, and escalating to Senior Privacy Counsel as necessary and appropriate.
• Completing various administrative tasks associated with the operation of the Privacy Office, such as scheduling meetings and conference calls, preparing relevant materials including meeting agendas and minutes, preparing PowerPoint presentations, supporting development of awareness media and education collateral, and helping with faxes, copies, mail, and other general administrative duties as necessary
• Handling special projects and other duties as assigned

• A Bachelor's degree or equivalent experience
• 5+ years of experience in related progressive roles demonstrating management of multiple initiatives
• 5 years of experience with privacy (including privacy program operations) and cybersecurity
• 3+ years of experience with privacy risk assessment and analysis
• 3+ years of experience working with product owners and developers
• 3+ years of experience with U.S. health privacy laws (such as HIPAA) and related compliance requirements
• Familiarity with Privacy by Design principles
• Familiarity with state privacy laws, or willingness to develop knowledge
• Strong research and writing skills including both formal memoranda and informal summaries
• Significant experience handling privacy inquiries and comfort with responding to external requests and individuals, including maintaining program documentation concerning the same
• Prior experienced developing privacy policies, standards, and related education (training and awareness) content and collateral
• A highly organized, agile, and detail-oriented management style with pragmatic judgement, managing multiple tasks, meeting conflicting deadlines, and engaging with leadership regarding issues and conflicts.
• Confidence when dealing with people at all levels of seniority
• Proven ability to contribute as part of a cross-functional team to implement privacy strategy and consistently demonstrate compliance with privacy policies

• Professional certifications, such as paralegal certification from an ABA-approved paralegal certification program and/or a privacy certification from an internationally recognized organization (International Association of Privacy Professionals or ISACA)
• Experience with OneTrust privacy assessment and OnSpring GRC tools
• Familiarity with Agile development, enterprise architecture, portfolio management, and security