Director of Privacy Compliance
University of California - Los Angeles Health, Los Angeles, CA, United States
Duration: Full Time
UCLA Health is seeking a highly collaborative and operationally focused leader to serve as Director, Privacy Compliance, a critical role within the Office of Compliance Services responsible for advancing a comprehensive, enterprise-wide privacy program across one of the nation's leading academic health systems.
UCLA Health is among the most advanced and comprehensive health systems in the country, with more than 34,000 employees, 4,600 faculty members, nearly 1,500 residents and fellows, and over 5,100 nurses across five hospitals and more than 280 outpatient clinics. As part of the University of California system, UCLA Health is nationally recognized for excellence in patient care, research, and education.
Reporting to the Chief Compliance and Privacy Officer, the Director will provide day-to-day leadership, management, and oversight of the UCLA Health Privacy Program, ensuring alignment with regulatory requirements, enterprise risk priorities, and the organization's clinical, research, and operational objectives.
Position Overview
The Director, Privacy Compliance is responsible for the operational leadership and ongoing enhancement of UCLA Health's privacy program. This includes oversight of privacy investigations, monitoring and auditing activities, training and education, risk assessments, and program governance.
Working in close partnership with clinical, research, compliance, legal, information security, and administrative leaders, this role ensures that privacy requirements are effectively translated into practical, business-aligned solutions that support both regulatory compliance and operational excellence.
The Director will also serve as a key liaison across the University of California system, collaborating with peer institutions and systemwide leadership to promote alignment, share best practices, and respond to evolving regulatory expectations.
Qualifications
- Bachelor's degree required; advanced degree preferred.
- Professional certification required (e.g., CHC, CHPC, CIPP/US).
- Minimum of 10 years of progressive experience in healthcare privacy, preferably within an academic medical center or large health system. Minimum of 3 years of leadership experience managing and developing teams, preferred.
Experience & Expertise
- Deep knowledge of HIPAA, HITECH, and applicable federal and California privacy laws governing PHI and PII.
- Demonstrated experience handling and managing privacy investigations, audits, monitoring programs, and risk assessments.
- Experience supporting privacy in research environments, including clinical trials and human subjects research.
- Familiarity with electronic health records (e.g., Epic/CareConnect) and healthcare data environments.
- Experience implementing and managing privacy tools, systems, and automated monitoring solutions.
Leadership Competencies
- Ability to operate effectively in a complex, matrixed academic health system.
- Strong analytical and problem-solving skills, with the ability to translate regulatory requirements into practical solutions.
- Exceptional written and verbal communication skills, including executive-level reporting and presentations.
- High level of integrity, professionalism, and discretion in handling sensitive information.
- Demonstrated ability to build relationships and influence across diverse stakeholder groups.