HIPAA Privacy Lead – Policy, Risk & Compliance

Job not on LinkedIn

🔥 0 minutes ago

🤠 Texas – Remote

🤠 Texas – Remote

⏰ Full Time

🟠 Senior

🚔 Compliance

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Southend Pharmacy

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2011

🏥 Healthcare

💼 Consulting

📦 Logistics

Healthcare • Consulting • Logistics

Southend Pharmacy is a 503A compounding pharmacy based in Houston, Texas that provides customized pharmaceutical preparations and clinical pharmacy services to clinics and healthcare providers across the United States. The company emphasizes clinical excellence, regulatory compliance, and trusted pharmacist expertise, and supports providers with digital tools such as LifeFile and real-time coverage mapping. Trusted by thousands of clinics, Southend Pharmacy focuses on delivering precise, provider-facing pharmaceutical solutions and logistical support for expanded geographic coverage.

📋 Description

• Maintain and mature HIPAA Privacy policies and procedures across all covered entities and business associates • Advise business, clinical, and IT teams on PHI handling and privacy risk mitigation • Define, implement, and monitor HIPAA controls with GRC and align privacy requirements with broader regulatory frameworks, including SOC 2 • Review project designs, system implementations, and process changes for HIPAA alignment and privacy-by-design • Own the BAA inventory, including drafting, tracking, and gap remediation • Support the de-identification framework, including Safe Harbor, Expert Determination, tokenization, and egress governance • Partner with outside counsel on privacy legal questions, data architecture reviews, and open-item tracking • Conduct HIPAA privacy risk assessments and breach risk analyses • Maintain the privacy risk register and drive remediation to closure • Collaborate during incidents on breach assessment, escalation, containment, notification decisions, and post-incident procedures • Serve as primary point of contact for privacy complaints, investigations, and regulatory inquiries • Lead vendor risk assessments for third parties handling PHI • Oversee patient requests for access, amendments, restrictions, and confidential communications • Partner with Engineering and Data Engineering to map PHI/PII data flows and review new systems, AI/agentic tools, and vendor integrations • Develop self-service tools and templates for routine privacy requirements • Design and deliver workforce HIPAA privacy and incident-management training • Represent AHG's privacy posture in regulatory, audit, and compliance forums • Monitor regulatory developments and report program status to the CCO

🎯 Requirements

• 5+ years of hands-on HIPAA Privacy compliance experience in a regulated environment, specifically within a Specialty Pharmacy or other Covered Entity • Hands-on experience with PHI/PII data flow mapping • Experience leading a HIPAA Annual Risk Assessment • Experience designing and delivering HIPAA Incident Management training • Working knowledge of the HIPAA Privacy Rule and Security Rule interplay • Working knowledge of BAA requirements (45 CFR §164.504(e), §164.314(a)) • Working knowledge of de-identification standards (§164.514) • Experience drafting or managing BAAs, data-sharing agreements, or privacy policies • Experience working directly with outside counsel and technical stakeholders • Experience using compliance and governance platforms such as OneTrust, NAVEX, RSA Archer, ServiceNow GRC, or similar • Experience with document management systems • Proficiency with Microsoft Office Suite, including Excel, Word, PowerPoint, and Outlook • Strong written communication skills to translate legal/regulatory requirements into actionable guidance • Must be legally authorized to work in the United States without current or future sponsorship • Preferred: CHC, CHPC, or CIPP/US certification • Preferred: experience with pharmacy, DTC health/wellness brands, or multi-brand healthcare holding structures • Preferred: familiarity with BigQuery, cloud data warehouses, or tokenization/de-identification tooling • Preferred: exposure to SOC 2 programs

🏖️ Benefits

• Full benefits package including medical, vision, dental, 401(k) with company match, PTO, Flex days, holidays, and more