Manager, Privacy and Records Governance

Extraordinary Careers. Endless Possibilities.

With the nation’s largest home infusion provider, there is no limit to the growth of your career.

 Option Care Health, Inc. is the largest independent home and alternate site infusion services provider in the United States. With over 8,000 team members including 5,000 clinicians, we work compassionately to elevate standards of care for patients with acute and chronic conditions in all 50 states. Through our clinical leadership, expertise and national scale, Option Care Health is re-imagining the infusion care experience for patients, customers and team members.

Join a company that is taking action to develop an inclusive, respectful, engaging and rewarding culture for all team members. At Option Care Health your voice is heard, your work is valued, and you’re empowered to grow. Cultivating a team with a variety of talents, backgrounds and perspectives makes us stronger, innovative, and more impactful. Our organization requires extraordinary people to provide extraordinary care, so we are investing in a culture that attracts, hires and retains the best and brightest talent in healthcare.

Job Description Summary:

The Privacy Manager supports and advances the company's enterprise privacy program, helping to ensure compliance with HIPAA, applicable state privacy laws, records management requirements, and emerging AI and digital health governance obligations. This role leads day-to-day privacy and records governance operations, including oversight of third-party contractors, and supports enterprise efforts related to privacy incident response, privacy risk management, records life cycle governance, and continuous enhancement of organizational controls. The Privacy Manager serves as a key cross functional partner in supporting responsible innovation, including AI enabled initiatives, while helping safeguard company and patient information and strengthen the organization's privacy and information governance framework. This role reports to the Vice President, Chief Privacy Officer and Data Protection and sits within the company's Compliance and Privacy function.

Job Description: ​

Job Responsibilities (listed in order of importance and/or time spent)

Incident & Breach Management:

• Manage day-to-day privacy incident intake, tracking, investigation support, and resolution, including maintaining accurate records of incidents, audits and assessments.
• Support breach response activities, including drafting patient and regulatory notifications, coordinating with internal stakeholders, and assisting with regulatory submissions as appropriate.
• Administer and optimize privacy program tools (e.g. Radar, TrustArc) to support incident management, assessments, and reporting.
• Prepare privacy incident and trend reporting for leadership and regulatory purposes, including identifying opportunities for control improvement.

Privacy Program Enhancement & Governance:

• Support continuous improvement of the enterprise privacy program through enhancements to policies, controls, metrics, processes, and supporting tools.
• Partner with the Vice President, Chief Privacy Officer & Data Protection to translate evolving privacy, AI, and digital health requirements into practical governance and operational practices.Manage third-party contractors and external resources supporting privacy program initiatives and operations. Support governance for the company’s processes to conduct de-identification of sensitive data

Compliance Monitoring, Privacy Risk Assessment & Assurance:

• Conduct privacy audits, monitoring, and compliance assessments to evaluate adherence to HIPAA, applicable state privacy laws and organizational policies.
• Perform privacy risk assessments for new projects, business development initiatives, vendors, technologies, and AI-enabled initiatives, and support remediation of identified gaps. Track and analyze privacy program metrics and prepare reporting and presentations for leadership.

Policy, Training and Awareness:

• Develop, review and update privacy policies, standards, and procedures under the direction of the Vice President, Chief Privacy Officer & Data Protection.
• Support enterprise privacy training, awareness, and educational initiatives that promote a strong culture of privacy and responsible data stewardship.

Records & Information Governance

• Manage day-to-day administration of the company's record management program including records retention defensible disposition records classification and policy implementation.
• Help develop and maintain records retention schedules procedures and governance standards consistent with legal regulatory operational and business requirements.
• Oversee third party vendors and contractors supporting record storage retrieval retention and destruction activities.
• Partner across the organization to strengthen information lifecycle management practices including appropriate retention minimization and secure disposition of information assets.

Supervisory Responsibilities

Does this position have supervisory responsibilities?

(i.e. hiring, recommending/approving promotions and pay increases, scheduling, performance reviews, discipline, etc.)

No        

Yes        

Basic Education and/or Experience Requirements

 Education: Bachelor’s degree in Business Healthcare Administration, Information Management, Law, Public Health, Information Security, or a related field required. Advanced degree preferred. Experience: 5+ years of healthcare privacy, data protection, records management, compliance, risk management, or a related field. Experience working with healthcare privacy laws and regulatory frameworks, including HIPAA, breach notification requirements, applicable state privacy laws, and records retention/information governance requirements.

Basic Qualifications

Strong knowledge of healthcare privacy requirements, privacy program governance, and operational privacy controls.

Demonstrated ability to assess privacy risk and to monitor and translate regulatory requirements into practical business processes and controls.

Experience using privacy management, governance, or incident tracking tools (such as TrustArc, Radar, or similar platforms).

Strong analytical, organizational, and project management skills, with the ability to manage multiple priorities in a fast-paced environment.

Strong written and verbal communication skills, including experience preparing presentations, regulatory communications, and practical business guidance.

 Ability to work collaboratively across Legal, Compliance, Information Security, Information Technology, and business teams, and effectively manage external partners and contractors.

Strong problem-solving skills with an ability to communicate effectively with technical and non-technical stakeholders across Option Care

Working knowledge of records retention, information lifecycle management, and defensible disposition principles.

Ability to integrate privacy, records governance, and data lifecycle requirements into practical operational processes and controls.

Physical Demand Requirements

This role is primarily performed in an office or remote office environment and requires the ability sit or remain stationary for extended periods of time and use a computer and standard office equipment.

Travel Requirements:  (if required)

Limited travel may be required for team meetings, training, audits, vendor meetings, or other business needs, generally less than 10% of time (in state or out of state).

Preferred Qualifications & Interests (PQIs)

Professional compliance, privacy, and/or AI certification, such as CHPS, CIPP/US, CIPM, or AI governance certification. Experience in healthcare services, specialty pharmacy, infusion therapy, provider organizations, or other highly regulated healthcare environments. Experience supporting records management, information governance, retention scheduling, or enterprise records compliance programs preferred.

Due to state pay transparency laws, the full range for the position is below:

Salary to be determined by the applicant's education, experience, knowledge, skills, and abilities, as well as internal equity and alignment with market data.

Pay Range is $112,439.64-$187,406.90

Benefits:

-Medical, Dental, & Vision Insurance

-Paid Time off

-Bonding Time Off

-401K Retirement Savings Plan with Company Match

-HSA Company Match

-Flexible Spending Accounts

-Tuition Reimbursement

-myFlexPay

-Family Support

-Mental Health Services

-Company Paid Life Insurance

-Award/Recognition Programs

Option Care Health subscribes to a policy of equal employment opportunity, making employment available without regard to race, color, religion, national origin, citizenship status according to the Immigration Reform and Control Act of 1986, sex, sexual orientation, gender identity, age, disability, veteran status, or genetic information.

​