Principal Privacy Consultant

Description

Do you want to join an organization that invests in you as a(an) Principal Privacy Consultant? At HCA Healthcare, you come first. HCA Healthcare has committed up to 300 million in programs to support our incredible team members over the course of three years.

HCA Healthcare, offers a total rewards package that supports the health, life, career and retirement of our colleagues. The available plans and programs include:

• Comprehensive medical coverage that covers many common services at no cost or for a low copay. Plans include prescription drug and behavioral health coverage as well as free telemedicine services and free AirMed medical transportation.
• Additional options for dental and vision benefits, life and disability coverage, flexible spending accounts, supplemental health protection plans (accident, critical illness, hospital indemnity), auto and home insurance, identity theft protection, legal counseling, long-term care coverage, moving assistance, pet insurance and more.
• Free counseling services and resources for emotional, physical and financial wellbeing
  
• 401(k) Plan with a 100% match on 3% to 9% of pay (based on years of service)
  
• Employee Stock Purchase Plan with 10% off HCA Healthcare stock
  
• Family support through fertility and family building benefits with Progyny and adoption assistance.
  
• Referral services for child, elder and pet care, home and auto repair, event planning and more
  
• Consumer discounts through Abenity and Consumer Discounts
  
• Retirement readiness, rollover assistance services and preferred banking partnerships
  
• Education assistance (tuition, student loan, certification support, dependent scholarships)
  
• Colleague recognition program
  
• Time Away From Work Program (paid time off, paid family leave, long- and short-term disability coverage and leaves of absence)
  
• Employee Health Assistance Fund that offers free employee-only coverage to full-time and part-time colleagues based on income.

Learn more about Employee Benefits

Note: Eligibility for benefits may vary by location.

You contribute to our success. Every role has an impact on our patients' lives and you have the opportunity to make a difference. We are looking for a dedicated Principal Privacy Consultant like you to be a part of our team.

Job Summary

The Information Protection and Security Principal Privacy Consultant plays a critical role with the development and support of HCA Healthcare's enterprise-wide information privacy and security program, as well as the Company's compliance, governance, and strategy relative to information protection. The Principal Privacy Consultant interacts extensively with leadership and business owners across the enterprise by developing strong strategic relationships and providing consultative support to assure compliance and enable the business. The role recognizes an individual's ability to lead, influence and direct compliance resulting from executive leadership direction.

The Principal Privacy Consultant assists the VP of Information Protection and Security (IPS)/Chief Privacy Officer (CPO) and the Senior Director/ACPO champion issues as chief advisor and visible spokesperson on artificial intelligence (AI), machine learning (ML), natural language processing, deep learning, the use of biometrics and other such key strategic initiatives from a regulatory compliance perspective. The Principal Privacy Consultant must effectively work with the VP/CPO, Senior Director/ACPO and executive management to identify, assess, prioritize, minimize and mitigate operational and compliance risks while still enabling the business.

Major Responsibilities:

• Leads the strategic planning process including key enterprise initiatives to develop a clear vision of the department's objectives and to address all regulatory requirements related to privacy.
• Drives the development of the company privacy risk assessment strategy to review business processes and evaluate privacy controls necessary to protect sensitive information.
• Serves as a visible subject matter expert and advocate by demonstrating from a privacy perspective an understanding of AI, machine learning, the use of biometrics, cloud technologies and other such enterprise-wide key strategic initiatives driven by Clinical Transformation and Innovation and other corporate teams by providing governance and mitigating controls while enabling the business.
• Utilizes subject matter expertise to define governance from a privacy perspective regarding the company's use of online tracking technologies (e.g., Google Analytics, Google Tag Manager, pixels to enable operations and the business while still minimizing and mitigating risks.
• Identifies, minimizes and mitigates legal and regulatory privacy and security compliance risks.
• Leads the review and analysis of proposed and final regulatory reform at the federal and state(s) levels (e.g., HIPAA, HITECH, CCPA, CPRA, other U.S laws, International Data Protection Laws such as GDPR, India's DPDPA, 21st Century Cures Act).
• Drives the development of remediation plans to address issues discovered during privacy and security reviews and/or assessments of applications, processes, and technology infrastructure by conceptualizing the next steps and bringing identified issues and opportunities to resolution.
• Leads the pre- and post- due diligence privacy review process for new acquisitions and divestitures by completing milestones timely and creating and executing detailed work plans.
• Leads regulatory research, analyzes regulations, identifies gaps and formulates comments via the Federal and State Proposed Rule Making Process.
• Leads policy and procedure development and support.
• Contributes to the selection of relevant topics and developing awareness communications.
• Reviews and approves privacy-related training materials and collaterals.
• Serves as a subject matter expert and chief advisor relative to the application of the HIPAA Privacy Rule, HITECH Act, and company policies and procedures.
• Develops strategic and consultative working relationships across all lines of business, project partners, and executive leadership to manage, minimize and mitigate privacy and security risks.
  

Knowledge, Skills, Abilities, Behaviors:

• Service and Quality Excellence: Ability to demonstrate an uncompromising commitment to delivering exceptional care to create an unmatched value proposition for our patients. Required
• Honor our Mission and Values: Ability to build trust and act with authenticity to cultivate a culture of integrity, inclusion, and mutual respect. Required
• Effective Decision Making: Ability to make timely, informed decisions that are in the best interest of our patients, employees, providers, community and HCA. Required
• Attain and Leverage Strategic Relationships: Ability to develop and strengthen collaborative relationships with both internal and external stakeholders to advance the care of our patients and the growth of HCA. Required
• Lead and Develop Others: Ability to lead others to accomplish organizational goals and objectives; provide meaningful coaching and mentoring to increase the capabilities of individuals and teams and drive employee engagement. Required
• Communicate with Impact: Ability to deliver information in a clear, concise, and compelling manner to effectively engage others and achieve desired results. Required
• Achieve Success through Change: Ability to identify opportunities for improvement and innovation, remove barriers and resistance, and enable desired behaviors. Required
• Drive Execution and Financial Results: Ability to commit to the success and financial wellbeing of HCA by challenging others to excel and hold themselves and others accountable for achieving results. Required

Education & Experience:

• Bachelors degree and 10 years of relevant work experience. Required or
• 20+ years of extensive and proven experience in privacy and security (e.g., HIPAA, HITECH) or other similar federal healthcare legislation in lieu of degree. Required

Licenses, Certifications, & Training:

• CHP, RHIA, RHIT, HCISPP, CISSP, CIPP, CIPM, CIPT Preferred

Other/Special Qualifications:

• Extensive and proven experience in information security, privacy, risk management, and privacy and security regulations (e.g., HITECH, HIPAA).
• A proven track record in creating and maintaining strong business relationships.
• Excellent written and verbal communications skills; interpersonal and collaborative skills; creative and strategic thinker with strong analytical skills; the ability to communicate privacy, security, and risk-related concepts to technical and non-technical audiences; persuasive, encouraging, motivating and inspiring.
• Independent, yet collaborative; respected by peers and others.
• High degree of initiative, dependability, and the ability to work with minimal supervision.
• Adaptable and flexible, with the ability to handle ambiguity and sometimes changing priorities.
• Professional demeanor, appearance, and positive attitude.

Additional Information:

• This role will require the candidate to live in or be willing to relocate to the Greater Nashville Area.
• Once established in the role, a hybrid schedule would be considered.

HCA Healthcare (Corporate), based in Nashville, Tennessee, supports a variety of corporate roles from business operations to administrative positions. Like our colleagues in any HCA Healthcare hospital, our corporate campus employees enjoy unparalleled resources and opportunities to reach their potential as healthcare leaders and innovators. From market rate compensation to continuing education and career advancement opportunities, every person has a solid foundation for success. Nashville is also home to our Executive Development Program, where exceptional employees are groomed to take on CNO- and COO-level roles in our hospitals. This selective program focuses on ethics, leadership and the financial and clinical knowledge required of professionals at this level of the industry.

HCA Healthcare has been recognized as one of the Worlds Most Ethical Companies by the Ethisphere Institute more than ten times. In recent years, HCA Healthcare spent an estimated 3.7 billion in cost for the delivery of charitable care, uninsured discounts, and other uncompensated expenses.

We are a family 270,000 dedicated professionals Our Talent Acquisition team is reviewing applications for our Principal Privacy Consultant opening. Qualified candidates will be contacted for interviews. Submit your resume today to join our community of caring

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.