Privacy Director

At Bon Secours Mercy Health, we are dedicated to continually improving health care quality, safety and cost effectiveness. Our hospitals, care sites and clinicians are recognized for clinical and operational excellence.

Work from Home / Remote – Anywhere in the United States (Eastern/Central Time Zone Preferred). The role reports to the System Director, Compliance – Privacy and has two direct reports.

Oversee all ongoing activities across defined service areas related to the development, implementation, maintenance and enforcement of the organization’s privacy policies and procedures governing the protection of patient Protected Health Information (PHI) in accordance with federal and state laws.

• Build and maintain a strategic and comprehensive privacy program, ensuring consistent, effective, and up‑to‑date privacy practices.
• Collaborate with IT Security and Information Services to align security and privacy programs, policies, and investigations.
• Partner with IT, Security, Legal and Business partners for privacy impact assessments, incident response and AI / machine learning risk assessments.
• Develop formal processes for privacy risk assessments with vendors, contractors and business associates, including data management and data destruction.
• Respond to consumer, government and media inquiries about privacy incidents or policies.
• Benchmark privacy program maturity against industry standards.
• Conduct ongoing compliance monitoring activities with other compliance and operational functions.
• Review role‑based access controls, conduct audits of PHI access and recommend actions based on audit findings.
• Lead the organization’s effort to maintain accurate privacy consents, authorization forms and information notices.
• Oversee advanced privacy training modules, including scenario‑based learning and refreshers.
• Administer processes for receiving, documenting, tracking and responding to complaints about privacy policies and procedures.
• Provide leadership, support and supervision to privacy program staff in day‑to‑day privacy functions.

• Certified in Healthcare Privacy Compliance – Health Care Compliance Association (required)
• Certified in Healthcare Compliance – Health Care Compliance Association (required)
• Certified Information Privacy Manager – International Association of Privacy Professionals (required)

• Bachelor’s in Healthcare, Regulatory, Business Administration or Business Ethics (required)
• Master’s (preferred)

• 6 to 10 years of Healthcare Regulatory experience including HIPAA (required)

• Deep knowledge of Privacy, Security, and Breach Notification Laws
• Incident and Breach Response
• Research of Regulations
• Risk Assessment Skills
• Auditing, Monitoring
• Investigation Processes & Techniques
• Policy Development and Implementation
• Education Development and Training
• Data Analytics and Reporting
• Microsoft Office & Copilot Proficiency
• Familiarity with privacy & compliance applications (e.g., Symplr, Protenus, EPIC)
• Strategic Leadership
• Communication
• Collaboration & Stakeholder Management
• Problem‑Solving
• Adaptability
• Change Management
• Conflict Resolution
• Analytical Thinking
• Team Development
• Integrity in Everything

• Competitive pay, incentives, referral bonuses and 403(b) with employer contributions (when eligible)
• Medical, dental, vision, prescription coverage, HSA/FSA options, life insurance, mental health resources and discounts
• Paid time off, parental and FMLA leave, short- and long-term disability, backup care for children and elders
• Tuition assistance, professional development and continuing education support

Benefits may vary based on the market and employment status.

All applicants will receive consideration for employment without regard to race, color, national origin, religion, sex, sexual orientation, gender identity, age, genetic information, or protected veteran status, and will not be discriminated against on the basis of disability. If you are an individual with a disability and would like to request a reasonable accommodation as part of the employment selection process, please contact The Talent Acquisition Team at