Change Healthcare Hiring For Senior Counsel Privacy (remote) at South Dakota, United States Full Time

Job Description

Senior Counsel Privacy (Remote)
Change Healthcare is a leading healthcare technology company with a mission to inspire a better healthcare system. We deliver innovative solutions to patients, hospitals, and insurance companies to improve clinical decision making, simplify financial processes, and enable better patient experiences to improve lives and support healthier communities.
Work Location:
Atlanta/Alpharetta, GA – Open to Remote – U.S.

Position:
We are seeking a Privacy Senior Counsel to work closely with the Chief Privacy Officer and all members of the Enterprise Privacy Office to help execute on all regulatory and compliance related privacy activities across the enterprise, including developing, implementing, and/or enhancing policies, technology, processes, and a program covering the privacy of, and access to, protected health information (PHI), Personal Information (PI), and sensitive personal data in compliance with US federal and state laws (e.g., HIPAA, CCPA, CPRA), GDPR, PIPEDA, and other relevant global privacy protection laws and regulations.
Core Responsibilities:
GENERAL PRIVACY FRAMEWORK AND PROGRAM SUPPORT

• Supporting the overall implementation of a strategic and comprehensive enterprise privacy program that defines, develops, maintains, and implements enterprise level policies and procedures and serving as an internal subject matter expert and/or project lead as needed in support of continuous improvement activities.
• Supporting the enablement of consistent, effective privacy practices which minimize risk and ensures the confidentiality of PI and PHI, paper and/or electronic, across all media types
• Providing privacy legal advice to critical teams such as Product Development, Information Security, HR, Marketing and Government Affairs in support of rapid solutions to meet identified privacy risks

REGULATORY AWARENESS AND CONTRACTING

• Monitoring continuous changes in privacy law (regulatory change awareness), offering insights and tracking consumer privacy regulation compliance (FTC, CCPA) to appropriately apply changes to assigned program domains, review and update enterprise privacy policies and procedures, and support related training, application and awareness activities with stakeholders and the business

• Providing privacy-related legal advice concerning business transactions, including reviewing and negotiating contracts with customers, 3rd party suppliers and business partners, performing privacy-related legal due diligence and drafting and negotiating and applicable privacy-related provisions

PROCESS, POLICY, AWARENESS AND TRAINING

• Assisting the Business Units in assessing and balancing privacy needs and developing practical solutions to help ensure business unit compliance with privacy laws, regulations, and standards
• Developing and delivering ongoing privacy training to team members and management
• Leading, initiating, facilitating, and promoting activities to foster information privacy awareness and data use in accordance with Change Healthcare’s Data Values within the organization and related entities

RISK MITIGATION AND REPORTING

• Supporting HIPAA risk analysis process and other regulatory assessments in coordination with information security
• Supporting regular information privacy risk assessment/analysis, mitigation, and corrective actions in coordination with information security
• Working with information security, review all system-related information security plans throughout the organization’s network to ensure alignment between security and privacy practices

PRIVACY INCIDENTS, INVESTIGATIONS AND AUDITS

• Support EPO, with the Business Unit compliance resources and others in Legal & Compliance, with conducting required privacy incident review and breach determination and notification processes under HIPAA, GDPR, and applicable state breach rules and requirements
• Leading any compliance reviews or investigations of the organization by the Office of Civil Rights, other federal or state regulators, and other regulatory agencies
• Performing required breach risk assessment, documentation, and mitigation; and working with Human Resources to ensure consistent application of sanctions for privacy violations

Requirements:

• Experience working within a large company, not-for-profit organization, law firm, or government agency:
  • 8+ years of experience providing legal counsel to clients on complex matters with advanced knowledge of the law that allows for expeditious problem identification and resolution and ability to advise on pertinent legal issues
  • 5+ years of experience providing privacy counsel to clients; focused on regulations such as HIPAA, CCPA, UK/GDPR, GDPR, PIPEDA
  • Deep knowledge of and experience in HIPAA, CCPA, UK/GPDR, and other federal, state, and global privacy protection laws and regulations
  • Privacy certification(s) a plus – e.g., CIPP-US, CIPP-E, CIPM, CIPT, CHPC, and/or Healthcare Privacy and Security (CHPS) and/or other healthcare industry related credential
• Drafting, negotiating, and reviewing Business Associate Agreements, Supplier Agreements, and other data privacy protection language in Customer Agreements; participating on customer and supplier calls when dealing with escalated privacy issues in contract negotiations
• Complex project management skills with ability to manage simultaneous projects in an efficient and timely manner.
• Excellent interpersonal skills with an ability to provide sound, clear legal advice to internal business and compliance clients, make risk-based decisions, and offer practical solutions

Education:
Juris Doctor Degree from an ABA accredited law school with excellent academic credentials; admission to practice in good standing as a member of a jurisdiction is required
Preferred Qualifications:

• Demonstrated skills in collaboration, teamwork, and problem-solving to achieve goals and efficiencies for legal support
• Ability to work independently, manage simultaneous projects in an efficient and timely manner and take ownership from start to finish with limited oversight
• Outstanding verbal and written communication skills, including presentation skills
• Organizational savvy and notable business acumen dealing with risk management and compliance
• Backgrounds in marketing, journalism, communications, technology systems, and/or web development a plus
• Familiarity with data security standards and frameworks (NIST, FISMA, HIPAA, etc.)
• Understanding and ability to utilize data including goals, use case and metrics to achieve best in class results and business goals.

Working Conditions/Physical Requirements:

• General office demands

Travel: 10%

Unique Benefits*:

• Flexible work environments
• Ready, Set, Grow Career Development Center & access to Change Healthcare University for continuous professional learning & development with more than 5,000 training assets
• Volunteer days, employee giving and matching gifts programs, community awards and dollars for doers, community partnerships
• Employee wellbeing programs and generous health plans
• Educational assistance programs
• US 401(k) or Group RRSP (Canada) savings plans with matching employer contributions
• Be sure to ask our Talent Advisors for more information on location specific benefits and paid time off policies
• Learn more at https://careers.changehealthcare.com
• Eligibility for some benefits may be limited or not available for part-time employees, be sure to speak with your Talent Advisor.

Diversity and Inclusion:

• At Change Healthcare, we include all. We celebrate diversity and inclusivity, respect each other and value our unique experiences. By being our authentic selves, we bring different perspectives into our work and relationships.
• Business Resource Groups (BRGs) play a central role in advancing diversity and inclusion at Change Healthcare. They deepen our understanding of different cultures, people, and experiences, and help foster an inclusive workplace. Change offers eight (8) BRGs. Learn more at https://careers.changehealthcare.com/diversity

Feeling Inspired? Ready to #MakeAChange? Apply today!
COVID Vaccination Requirements
We remain committed to doing our part to ensure the health, safety, and well-being of our team members and our communities. As such, we require all employees to disclose COVID-19 vaccination status prior to beginning employment and, when job-related and consistent with business necessity, we may require periodic testing for certain roles. Some roles require full COVID-19 vaccination as an essential job function. Change Healthcare adheres to COVID-19 vaccination regulations as well as all client COVID-19 vaccination requirements and will obtain the necessary information from candidates prior to employment to ensure compliance.
Equal Opportunity/Affirmative Action Statement
Change Healthcare is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, genetic information, national origin, disability, or veteran status. To read more about employment discrimination protections under federal law, read EEO is the Law at https://www.eeoc.gov/employers/eeo-law-poster and the supplemental information at https://www.dol.gov/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf.
If you need a reasonable accommodation to assist with your application for employment, please contact us by sending an email to [email protected] with “Applicant requesting reasonable accommodation” as the subject. Resumes or CVs submitted to this email box will not be accepted.
Click here https://www.dol.gov/ofccp/pdf/pay-transp_%20English_formattedESQA508c.pdf to view our pay transparency nondiscrimination policy.
California (US) Residents: By submitting an application to Change Healthcare for consideration of any employment opportunity, you acknowledge that you have read and understood Change Healthcare’s Privacy Notice to California Job Applicants Regarding the Collection of Personal Information.
Change Healthcare maintains a drug free workplace and conducts pre-employment drug-testing, where applicable, in accordance with federal, state and local laws.