Jobs › HIPAA
HIPAA Compliance Jobs
HIPAA is the US law governing the privacy and security of protected health information.
The Health Insurance Portability and Accountability Act (HIPAA), through its Privacy Rule, Security Rule, and Breach Notification Rule, sets the federal standard for protecting health information in the United States. It applies to covered entities, health plans, providers, and clearinghouses, and to the business associates that handle protected health information (PHI) on their behalf. The Security Rule requires administrative, physical, and technical safeguards, and the HHS Office for Civil Rights enforces it with investigations and penalties.
In healthcare GRC, HIPAA is the baseline every program is built on, and it is increasingly entangled with AI, as health systems and digital-health companies deploy models on exactly the data HIPAA protects. Roles in this space want people who can run a HIPAA program, manage business-associate risk, and handle breaches, often alongside HITRUST certification.
HIPAA: Frequently Asked Questions
Who must comply with HIPAA?
Covered entities (health plans, health care providers, and clearinghouses) and their business associates that create, receive, maintain, or transmit protected health information.
What are the main HIPAA rules?
The Privacy Rule, the Security Rule, and the Breach Notification Rule, governing the use, protection, and breach reporting of protected health information.
Who enforces HIPAA?
The US Department of Health and Human Services Office for Civil Rights (OCR), which investigates complaints and can impose civil and, in some cases, criminal penalties.
Open HIPAA GRC roles (34)
Director, Governance, Risk, and Compliance (GRC)
Governance, Risk & Compliance (GRC) Manager
Senior GRC Engineer
Manager, GRC Subject Matter Experts, Product
Privacy and AI Counsel
VP of Information Security
Assistant General Counsel, Privacy
Cybersecurity Business Systems Analyst II
Senior GRC Specialist
Senior AI GRC Engineer
Senior Director, Privacy, Security & Data Compliance
Senior Compliance Advisor
Security GRC Manager: Customer Trust Enablement
Senior Fullstack Engineer, Vendor Risk Management - UK
Compliance Program Assistant Manager
Engineering Manager - Privacy Infrastructure
Staff+ Software Engineer, Privacy
Data Governance & Workday Reporting Specialist
Engineering Manager, GRC Platform
Staff+ Software Engineer, GRC Platform
Healthcare Privacy & Compliance Specialist
Senior Fullstack Engineer, Vendor Risk Management
Senior Engineering Manager, Privacy & Data Security
Group Product Manager, GRC Workflows
Senior Manager, Audit Partnerships
Lead Data Governance Analyst (Enterprise Program Build Focus)
HR Compliance, Risk & Policy Lead
Senior HR Compliance Manager
Senior Specialist, Coding Auditor
Senior Claims Auditor - DRG
Senior Fullstack Software Engineer, Privacy & Data Security
Head of Regulatory & Compliance
Senior Security Engineer I, GRC
Director of Security, GRC
All GRC jobs · Job alerts