Assistant Privacy Officer - Compliance

Presbyterian is seeking an Assistant Privacy Officer to support the Presbyterian Healthcare Services’ Privacy Officer in leading the organization’s privacy program, ensuring compliance with privacy laws, protecting sensitive data, and promoting privacy awareness. This role supports privacy leadership with agility amid evolving technologies and public trust dynamics that’s strategic and builds cross-functional influence with IT security, Legal, and enterprise business units through coordination of privacy initiatives, health data management and protection, and incident investigation.

• This is a Full Time position - Exempt: Yes
• Job is based at Rev Hugh Cooper Admin Center
• Work hours: Days

• Juris Doctor (JD) from an accredited law school and 7 or more years of experience working in health care or equivalent combination of education and experience required.
• CIPP/US certification preferred.

Desired experience includes:

• Knowledge of federal and state laws and regulations related to health care
• Awareness of data privacy and security laws
• Effective and persuasive writing and oral communication skills
• In-house privacy and cybersecurity breach response experience
• Demonstrated interest in privacy and cybersecurity breach response work with emphasis on project management skills
• Strong communication and interpersonal skills with the ability to interact effectively with health care providers, workforce members, and other stakeholders
• Motivation to learn and understand technology and forensic investigations to interact effectively with technically skilled individuals and condense key issues and findings for non-technical business team members
• Professional commitment and interpersonal skills necessary to succeed in a collaborative team environment

• Coordinate and implement privacy initiatives: Assist in developing and maintaining privacy policies and programs, draft documents, navigate regulatory complexity while enabling innovation, collaborate and create cross-functional relationships to enable and ensure compliance with relevant laws and regulations.

• Manage incident response and compliance: Investigate and support to final resolution data events, incidents, breaches, regulator and state agency inquiries and reviews, conduct privacy audits and assessments through participation within AI and other data governance bodies, data ethics, and support to enable business privacy initiatives.

• Promote training and stakeholder communication: Help develop and deliver privacy strategies required to thrive, conduct privacy compliance assessments, communicate with internal and external stakeholders on privacy matters, keep privacy policies, initiatives, and strategies current with evolving technologies, help shape the future of responsible data use within an environment of evolving privacy laws and best practices.

About Presbyterian Healthcare Services
Presbyterian offers a comprehensive benefits package to eligible employees, including medical, dental, vision, disability coverage, life insurance, and optional voluntary benefits.

The Employee Wellness Rewards Program encourages staff to engage in health-enhancing activities - like challenges, webinars, and screenings - with opportunities to earn gift to earn gift cards and other incentives.

As a mission-driven organization, Presbyterian is deeply committed to improving community health across New Mexico through initiatives like growers' markets and local partnerships. Founded in 1908, Presbyterian is a locally owned, not-for-profit healthcare system with nine hospitals, a statewide health plan, and a growing multi-specialty medical group. With nearly 14,000 employees, it is the largest private employer in the state, serving over 580,000 health plan members through Medicare Advantage, Medicaid, and Commercial plans.

AA/EOE/VET/DISABLED. PHS is a drug-free and tobacco-free employer with smoke free campuses.

USD $56.92/Hr.

The compensation range for this role takes into account a wide range of factors, including but not limited to experience and training, internal equity, and other business and organizational needs.