Information Governance and Privacy Manager

Job DescriptionSupport legal counsel with patient and consumer privacy, cybersecurity, and security incident response enterprise-wide. This person will be responsible for legal analysis and research, program documentation and management, and data privacy contract reviews. This individual will assist in various aspects of incident response, including investigations, remediation, and subsequent legal obligations, as necessary. Prior experience as a paralegal in privacy compliance preferred.This person should be knowledgeable about the Health Insurance Portability and Accountability Act (HIPAA), cybersecurity regulations (e.g., 23 NYCRR 500, Insurance Data Security Laws), and consumer privacy regulations (e.g., CCPA/CPRA). This individual should be familiar with healthcare incident response and healthcare data flows, including the exchange of healthcare information through electronic health records, health information exchanges, and healthcare interoperability networks. This individual will serve as the lead reviewer on data privacy agreements, such as business associate agreements, data sharing agreements, and data security agreements. This person may support the development of privacy operations processes, including help with implementing new technologies and automation.These obligations are applicable to CVS Health corporate and all business segments (including Front Store, Retail Pharmacy, PBM Mail, Specialty, Care Plus, Coram, Omnicare, Minute Clinic, SilverScript, Medicare D, Aetna, etc.).Pay RangeThe typical pay range for this role is:Minimum: 60,300Maximum: 126,600Please keep in mind that this range represents the pay range for all positions in the job grade within which this position falls. The actual salary offer will take into account a wide range of factors, including location.Required Qualifications5+ years of privacy compliance or legal servicesPreferred Qualifications5 to 8 years of prior privacy compliance or legal servicesEducationBachelor's DegreeBusiness OverviewBring your heart to CVS Health Every one of us at CVS Health shares a single, clear purpose: Bringing our heart to every moment of your health. This purpose guides our commitment to deliver enhanced human-centric health care for a rapidly changing world. Anchored in our brand - with heart at its center - our purpose sends a personal message that how we deliver our services is just as important as what we deliver. Our Heart At Work Behaviors support this purpose. We want everyone who works at CVS Health to feel empowered by the role they play in transforming our culture and accelerating our ability to innovate and deliver solutions to make health care more personal, convenient and affordable. We strive to promote and sustain a culture of diversity, inclusion and belonging every day. CVS Health is an affirmative action employer, and is an equal opportunity employer, as are the physician-owned businesses for which CVS Health provides management services. We do not discriminate in recruiting, hiring, promotion, or any other personnel action based on race, ethnicity, color, national origin, sex/gender, sexual orientation, gender identity or expression, religion, age, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law. We proudly support and encourage people with military experience (active, veterans, reservists and National Guard) as well as military spouses to apply for CVS Health job opportunities.

Created: 2024-10-19