Skip to Main Content

Kaiser Permanente Careers

Compliance, Privacy & Regulatory

Putting Integrity Into Practice

Promoting honesty and integrity across our daily actions and interactions, our compliance, privacy, and regulatory professionals provide the guidance and resources to uphold the highest ethical standards.

Director, Privacy

Location: Portland, OR Additional Locations:
Job Number: 808968 Date posted: 07/09/2019
Responsible for directing privacy compliance initiatives throughout the region, managing relationships and maintaining communications with stakeholders at all levels internally and externally to reduce compliance risk. Directs, leads and oversees the research, planning, implementation, monitoring, validation and reporting for activities related to the organization's program for the privacy of protected health information as defined by the Privacy and Security standards of the Omnibus Health Information Portability and Accountability Act (HIPAA), 42 C.F.R., and other applicable contract requirements, federal and state laws and regulations.  Directs investigations related to privacy violations as well as required reporting to regulators. Serves as the regional privacy officer and serves as the liaison to regulators.

Essential Responsibilities:
  • Issue management, response and mitigation: Responsible for privacy issues for functional areas across the enterprise. Proactively identifies risks and issues related to projects, initiatives and production operations.  Performs privacy risk assessments, directs the development of risk response plans and conducts related ongoing compliance monitoring activities. Anticipates and addresses issues through regular communication with internal and external parties at all levels, mitigating risk or, in the most severe cases, escalating issues for resolution by executive levels as necessary.
  • Models and drives continuous learning and assists in maintaining a highly skilled and engaged workforce by aligning departmental plans with business objectives; conducting regular privacy-related training; taking a leadership role in privacy-related investigations, decision making and resolution, staying current with industry trends, benchmarks and best practices; providing guidance and leadership when difficult decisions need to be made
  • Compliance consultation: Provides consultation on all privacy-related matters including data sharing, leading work on the development, use and maintenance of appropriate privacy and confidentiality consent forms, authorization forms, notices and materials reflecting current privacy practices and state and federal requirements. This includes member/patient rights to inspect, amend and restrict access to their information.
  • Privacy investigations and resolution: Responsible for engagement and oversight of investigational outcomes and actions, consulting and working directly with the investigations team and for ensuring investigators are well trained in privacy regulations and procedures.  Identifies and implements continuous improvement activities. Works with the National Compliance Office on significant privacy matters.
  • Regulator/Group communications and resolution: Responsible for responding to inquiries from the Office for Civil Rights (OCR) and ensuring accurate annual reporting to the OCR.  Also, will take the lead in privacy reviews, investigations and inquiries by other regulating bodies and/or employer groups.
  • Communications, stakeholder management: Responsible for chairing privacy compliance committees, staffing the regional compliance committee and advising executive leadership on privacy compliance matters. Leads teams that assess organizational processes/systems to determine any compliance gaps and assist in the development of opportunities for remediation..
  • Represents the NW Region, in shaping decisions about privacy policies and procedures at a national level.
  • Basic Qualifications:
  • Minimum five (5 years of experience in a leadership role with or without direct reports.
  • Minimum eight (8) years of health care compliance, regulatory, health care operations (quality, risk, etc.) audit, finance, investigations or insurance/health plan or a directly related field.
  • Minimum five (5) years of experience implementing and ensuring compliance with state, federal and privacy laws and regulations, preferably in a health care or health insurance environment.
  • Education
  • Bachelor's degree in health care administration, clinical, law, public health, business or related field OR four (4) years of experience in a directly related field.
  • High School Diploma or General Education Development (GED) required.
  • License, Certification, Registration
  • N/A

  • Additional Requirements:
  • Demonstrated experience in developing and implementing annual work plans, performing risk assessments and auditing and monitoring programs.
  • Strong leadership and customer service orientation and experience dealing with all levels or professional and public.
  • Strong computer skills including Microsoft applications, project management, email and other databases.
  • Ability to influence diverse groups of individuals at all levels.
  • Excellent interpersonal and oral and written communications skills.
  • Ability to work independently, practice good judgment and cultivate trust with labor, peers, regulators and internal and external stakeholders and customers.
  • Excellent time management and project management skills.
  • Ability to write reports summarizing audit findings and recommendations and assist in the development of corrective action plans.
  • Familiarity with HIPAA, 42 C.F.R. and other federal, state and local regulations relating to privacy and confidentiality and security.
  • Experience delivering training and oral presentations to all levels in an organization.
  • Excellent data analysis and evaluation skills.
  • Ability to communicate effectively with and coordinate efforts of a variety of professional, technical, and non-technical personnel within the organization.

  • Preferred Qualifications:
  • Minimum five (5) years of experience as a privacy officer, prerferably in a managed care setting or care delivery setting, which provided a thorough understanding of the health care and/or insurance processes
  • Minimum five (5) years of experience implementing and ensuring compliance with state, federal and privacy laws and regulations in a health care or health insurance environment.
  • Three (3) years supervisory/management experience.
  • Minimum five (5) years of working cross-functionally across departments, functions, business lines.
  • Minimum five (5) years of experience working with regulatory agencies.
  • Minimum five (5) years of experience working in a clinical or health plan setting 
  • Master's degree in Health Care Administration, Clinical, Law, Public Health, Business or related field.
  • JD degree.
  • Certified in Health Care Compliance (CHC) or Certified in Healthcare Privacy Compliance (CHPC)
  • Primary Location: Oregon,Portland,Kaiser Permanente Building 500 NE Multnomah St. Scheduled Weekly Hours: 40 Shift: Day Workdays: Mon, Tue, Wed, Thu, Fri Working Hours Start: 8:00 AM Working Hours End: 5:00 PM Job Schedule: Full-time Job Type: Standard Employee Status: Regular Employee Group/Union Affiliation: Salaried, Non-Union, Exempt Job Level: Director/Senior Director Job Category: Compliance / Privacy / Regulatory Department: NW Ethics and Compliance Travel: Yes, 10 % of the Time Kaiser Permanente is an equal opportunity employer committed to a diverse and inclusive workforce. Applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy), age, sexual orientation, national origin, marital status, parental status, ancestry, disability, gender identity, veteran status, genetic information, other distinguishing characteristics of diversity and inclusion, or any other protected status.

    External hires must pass a background check/drug screen. Qualified applicants with arrest and/or conviction records will be considered for employment in a manner consistent with federal and state laws, as well as applicable local ordinances, including but not limited to the San Francisco and Los Angeles Fair Chance Ordinances.

    About Compliance, Privacy & Regulatory Careers

    Compliance, Privacy & Regulatory Careers

    We've established a comprehensive, world-class compliance, privacy, and regulatory program, giving you the chance to make a difference in the lives of millions. As a member of this team, you'll engage with internal stakeholders to foster an environment of safety and trust for our members, physicians, and employees alike.

    Helping to establish and maintain an effective compliance program, you'll ensure that we operate according to the highest ethical standards and follow all applicable laws, standards, policies, and procedures. Everything we do — from developing policies and training to protecting privacy and security — reinforces our commitment to our members, regulators, and the communities we serve.

    Glassdoor Logo

    See What People are Saying About Working at KP

    Mar 26, 2019

    "The best job I have ever had!"

    Glassdoor Ratings

    Current Employee - Senior Project Manager in Oakland, CA

    • Recommends
    • Positive Outlook
    • Approves of CEO

    I have been working at Kaiser Permanente full-time for more than a year


    Real focus on creating higher quality, more affordable healthcare. Talented coworkers and great mentors. Fabulous benefits.Full Review

    More Kaiser Permanente Ratings & Reviews (5,917)

    to Our

    Kaiser Permanente has been named one of the 2019 Best Places to Work. Check out what our employees like best about working at KP!

    glassdoor 2019 Best Places to Work - Employees' Choice

    Our Events

    Come introduce yourself to a member of the Kaiser Permanente team at an upcoming career or professional event. We look forward to meeting you in person.

    Recently Viewed Jobs

    You do not have any recently viewed jobs.

    Join Kaiser Permanente's Talent Network

    Please fill out the fields below and click "Join Now" to receive information about opportunities that relate to your selections.

    Interested InSearch for a category and select one from the list of suggestions. Search for a location and select one from the list of suggestions. Finally, click “Add” to create your job alert.

    Interested in internships or early career opportunities? Click here to join our University Talent Network. Are you a Veteran? Click here to join our Military Talent Network.