Senior Director, Compliance and Privacy

## Senior Director, Compliance and Privacy Apply:
US IL Chicago

E. Randolph:
Chicago or Washington, D.C.:
Full time:
Posted Yesterday:
End Date:
October 26, 2026 (25 days left to apply):
JR6013

Job Description

Summary:

This role is responsible for providing strategic direction and oversight for the organization's corporate compliance and privacy programs. It ensures alignment with evolving healthcare regulations, industry standards, and internal policies. As a key advisor to executive leadership, the Board of Directors, and governance committees, the role fosters a culture of ethics, accountability, and transparency across the enterprise. This role will serve as the designated Privacy Official, responsible for the development and implementation of policies and procedures, personnel training, and processes to investigate and respond to complaints regarding impermissible uses or disclosures of PHI and related policy violations.

Has full ownership of HIPAA compliance for BCBSA.
The position leads a team of compliance and privacy professionals, driving continuous improvement and operational excellence. It plays a critical role in risk mitigation, regulatory readiness, and the development of policies and practices that safeguard patient and organizational data.
** Responsibilities include but are not limited to:
** Government Programs Compliance  
• Serve as BCBSA’s Medicare Compliance Official for purposes of complying with Medicare Compliance obligations.

• Serve as the subject matter expert for Medicare Part D and other government programs compliance.  
• Build and oversee the operations of government programs compliance programs, as necessary  
• Support and oversee the operations of Compliance Committee(s), and report findings to leadership and through appropriate BCBSA governance Committee(s).Corporate Compliance Oversight   
• Serve as BCBSA's Compliance Official  
• Provide leadership and operational oversight for BCBSA's Compliance and Ethics Program, including the Code of Business Conduct and annual reporting to leadership and the Board.

• Address compliance issues in collaboration with internal stakeholders.

Privacy Program Leadership   
• Serve as BCBSA’s Privacy Official for purposes of HIPAA compliance  
• Oversee the organization’s Privacy Program, including HIPAA and GDPR compliance.

• Lead cross-functional efforts to investigate and resolve privacy incidents.

Team Leadership   
• Lead and develop a high-performing compliance and privacy team, fostering professional growth and a positive, inclusive work environment.  Systemwide Engagement   
• Promote best practices and coordinate incident response efforts across the system.

Training & Education   
• Oversee compliance and ethics training programs for Blue Plan Compliance leaders.
** The posting range for this position is:**
- ** Required Education, Certifications and

Experience:

**** Education
* ** Required BS or equivalent work experience
* Preferred MS in Law;
Business Administration; or equivalents
** Experience
* ** Required 12+ Years Experience in the healthcare industry with demonstrated knowledge of regulatory, privacy (HIPAA), and compliance and ethics issues
** Knowledge

Skills and Abilities

*** Proven ability to lead teams, drive organizational change, and influence cross-functional initiatives in complex environments.
* Deep understanding of healthcare compliance, privacy program administration, and data security technologies, including HIPAA and GDPR.
* Strong capability to assess regulatory and operational risks and develop effective mitigation strategies.
* Excellent analytical skills with sound business judgment, creativity, and initiative to solve complex problems.
* Advanced interpersonal and communication skills, including experience…