Privacy Manager

SCAN

. Manage assigned day-to-day privacy program activities for SCAN health plans and affiliated health care entities .

Posted 10/16/2026full-timeLong Beach • California • United StatesMid-LevelSenior💰 $106,200 - $153,705 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing privacy programs, implementing compliance processes, and conducting privacy impact assessments while ensuring adherence to HIPAA, HITECH, and state privacy laws. Strong ability to collaborate across functions and deliver training and guidance on privacy requirements and best practices.

Highest-signal resume keywords

HIPAA CompliancePrivacy Impact AssessmentsCross-Functional CollaborationPrivacy Policy DevelopmentData Governance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Privacy Risk AssessmentIncident ResponseData MinimizationRegulatory CompliancePrivacy ReviewsData Security LawsPrivacy-By-Design PrinciplesVendor OversightMetrics PreparationAuditing Activities

Soft Skills

Strong CommunicationProject ManagementOrganizational SkillsInfluenceChange Implementation

Tools & Technologies

NIST Privacy FrameworkHITRUSTSOC 2ISO StandardsAI Governance

Certifications & Qualifications

CHPCCIPP/USCIPMAIGP

Industry Keywords

Healthcare AdministrationComplianceInformation SecurityData GovernanceConsumer Health DataBreach Notification LawsEmerging TechnologiesOnline Tracking TechnologiesPrivacy Enhancing ControlsLegal Requirements

About the role

Key responsibilities & impact

Manage assigned day-to-day privacy program activities for SCAN health plans and affiliated health care entities
Implement established processes, controls, standards, and documentation supporting compliance across business and clinical operations
Perform and coordinate privacy impact assessments, risk assessments, audits, and gap analyses
Maintain assigned risk register entries, track remediation, and escalate significant issues to Privacy leadership
Draft, update, and implement privacy policies, procedures, notices, standards, and operational guidance
Support implementation of HIPAA, HITECH, 42 CFR Part 2, federal health privacy requirements, and applicable state privacy, consumer health data, biometric, breach notification, and data security laws
Conduct and coordinate monitoring and auditing activities related to privacy requirements, appropriate access, minimum necessary use, retention, data sharing, and individual rights
Prepare metrics, dashboards, and supporting materials for leadership, committees, audits, and regulatory inquiries
Advise and collaborate with Legal, Compliance, Information Security, IT, Data and Analytics, Clinical, Product, Marketing, Human Resources, Procurement, and business teams
Incorporate privacy requirements into projects, systems, contracts, digital experiences, communications, and operational workflows
Manage intake, investigation, risk assessment, documentation, mitigation, and closure of assigned privacy incidents
Coordinate corrective actions, support required notifications and regulatory responses, maintain defensible records, and escalate potential breaches or material issues
Assist with privacy reviews of AI, machine learning, automated decision systems, ambient technologies, online tracking technologies, and advanced analytics
Evaluate data sources, intended uses, transparency, human oversight, vendor practices, retention, secondary use, and individual impact; recommend safeguards and monitoring requirements
Develop and deliver role-based training, practical guidance, communications, and awareness materials
Manage or support processes for data minimization, retention and deletion, individual privacy rights, consent and preference management, and third-party data sharing
Assist with privacy reviews of vendors, contracts, data use agreements, business associate arrangements, and higher-risk processing activities
Actively support the achievement of SCAN’s Vision and Goals
Other duties as assigned

Requirements

What you’ll need

Bachelor's Degree in Healthcare Administration, Law, Business or related field or equivalent experience
5 or more years of progressively responsible experience in privacy, compliance, information security, legal, health care operations, data governance, or related field
Strong knowledge of HIPAA, HITECH, 42 CFR Part 2, state medical privacy and breach notification laws, comprehensive state consumer privacy laws, and emerging consumer health data and AI requirements is preferred
Demonstrated experience implementing privacy and security requirements, conducting privacy reviews and investigations, assessing privacy and regulatory risks, supporting incident response activities, and coordinating cross-functional initiatives is required
Experience applying privacy-by-design principles, evaluating emerging technologies, including artificial intelligence (AI), and supporting compliance with healthcare privacy and security regulations is preferred
Preferred Certifications or Licenses: CHPC, CIPP/US, CIPM, AIGP, or a comparable privacy, compliance credential preferred
Preferred 8 or more years of privacy, compliance, legal, data governance, information security, or related experience is preferred
Practical experience with privacy impact assessments, data inventories, individual rights, vendor oversight, incident response, regulatory inquiries, online tracking technologies, AI governance, and privacy-enhancing controls is preferred
Familiarity with the NIST Privacy Framework, NIST AI Risk Management Framework, HITRUST, SOC 2, ISO standards, or similar frameworks is beneficial
Strong project management, organization, and change implementation capabilities
Strong written and verbal communication, influence, and cross-functional collaboration skills
Ability to interpret complex legal and technical requirements and convert them into practical operational controls
Ability to prioritize multiple regulatory, operational, incident, technology, and project-based assignments
Ability to handle sensitive and confidential information with discretion and maintain defensible documentation
A background check is required

Benefits

Comp & perks

An annual employee bonus program
Robust Wellness Program
Generous paid-time-off (PTO)
11 paid holidays per year
1 floating holiday
Birthday off
2 volunteer days
Excellent 401(k) Retirement Saving Plan with employer match
Robust employee recognition program
Tuition reimbursement
Equal pay, employee resource groups, inclusive benefits, and more