Privacy Specialist (Healthcare Environment)

Please note this position is contingent upon award (Q2/Q3 2025), and may require occasional customer site visits in D.C.

Primary Responsibilities:

• Develop and implement privacy policies and controls for VA corporate IT systems, ensuring the protection of Veteran healthcare data across legacy and modernized environments (e.g., AWS, Azure). 
• Conduct privacy impact assessments (PIAs) and risk analyses, identifying and mitigating risks to sensitive health information in compliance with HIPAA, FISMA, and VA privacy standards. 
• Collaborate with Cyber Security Architects, Data Architects, and DevOps teams to integrate privacy-by-design principles into Continuous Integration/Continuous Delivery (CI/CD) workflows and Agile processes. 
• Monitor and audit systems handling protected health information (PHI), ensuring adherence to federal regulations (e.g., HIPAA Privacy and Security Rules, NIST 800-66) and VA policies. 
• Serve as a subject matter expert on healthcare privacy, advising VA stakeholders, including the Contracting Officer’s Representative (COR) and Privacy Officer, on compliance requirements and best practices. 
• Utilize VA-approved tools (e.g., Jira, GitHub, ServiceNow) to document privacy controls, track compliance activities, and contribute to Biweekly Status Reports on privacy status and incidents. 
• Support the VIP Lean-Agile framework by embedding privacy considerations into Agile ceremonies (e.g., sprint planning, retrospectives) and ensuring data protection aligns with sprint deliverables. 
• Coordinate with data migration and cloud teams to safeguard PHI during transitions to modern platforms, ensuring secure handling and storage of healthcare data. 
• Respond to privacy incidents, supporting investigations and implementing corrective actions to prevent recurrence and protect VA operations and patients. 
• Stay current on emerging privacy threats and regulations (e.g., GDPR influences, AI in healthcare), recommending enhancements to VA’s privacy posture as needed. 
• Mentor team members on healthcare privacy regulations and practices, contributing to Trilogy’s staff development and compliance-focused initiatives. 
• Drive exceptional customer satisfaction by delivering robust, Veteran-centric privacy solutions that safeguard sensitive health data and align with VA’s healthcare mission. 

Minimum Requirements:

• Bachelor’s degree in Healthcare Administration, Information Technology, Cybersecurity, or a related field.
• Healthcare Information Security and Privacy Practitioner (HCISPP) certification required.
• 8+ years of experience in privacy management, data protection, or a related role within a healthcare or federal environment, preferably with VA or similar agencies. 
• Proven expertise in healthcare privacy regulations (e.g., HIPAA, HITECH), risk assessment, and compliance, with hands-on experience in auditing and securing PHI. 
• Strong analytical and communication skills, with the ability to navigate complex privacy challenges in a dynamic, fast-paced setting. 
• Familiarity with VA security and privacy standards (e.g., FISMA, NIST, VA Handbook 6500) and the VIP Lean-Agile framework is highly desirable. 
• Proficiency in MS Office Applications (Word, Excel, PowerPoint, Visio, SharePoint) and VA-approved tools (e.g., Jira, GitHub, ServiceNow). 
• Ability to adapt to evolving privacy requirements and travel occasionally to VA sites in Washington, D.C., as needed. 
• Ability to obtain a Public Trust Clearance

Preferred Qualifications:

• Master’s preferred
• Additional certifications such as Certified Information Privacy Professional (CIPP/US) or CISSP preferred. 

Benefits (including but not limited to):

• Health, dental, and vision plans
• Optional FSA
• Paid parental leave
• Safe Harbor 401(k) with employer contributions 100% vested from day 1
• Paid time off and 11 paid holidays
• No cost group term life/AD&D plan, and optional supplemental coverage
• Pet insurance
• Monthly phone and internet stipend
• Tuition and training reimbursement