Director of Privacy Compliance

UCLA Health is seeking a highly collaborative andoperationally focused leader to serve as Director, Privacy Compliance, acritical role within the Office of Compliance Services responsible foradvancing a comprehensive, enterprise-wide privacy program across one of thenation's leading academic health systems.

UCLA Health is among the most advanced and comprehensivehealth systems in the country, with more than 34,000 employees, 4,600 facultymembers, nearly 1,500 residents and fellows, and over 5,100 nurses across fivehospitals and more than 280 outpatient clinics. As part of the University ofCalifornia system, UCLA Health is nationally recognized for excellence inpatient care, research, and education.

Reporting to the Chief Compliance and Privacy Officer, theDirector will provide day-to-day leadership, management, and oversight of theUCLA Health Privacy Program, ensuring alignment with regulatory requirements,enterprise risk priorities, and the organization's clinical, research, andoperational objectives.

Position Overview

The Director, Privacy Compliance is responsible for theoperational leadership and ongoing enhancement of UCLA Health's privacyprogram. This includes oversight of privacy investigations, monitoring andauditing activities, training and education, risk assessments, and programgovernance.

Working in close partnership with clinical, research,compliance, legal, information security, and administrative leaders, this roleensures that privacy requirements are effectively translated into practical,business-aligned solutions that support both regulatory compliance andoperational excellence.

The Director will also serve as a key liaison across theUniversity of California system, collaborating with peer institutions andsystemwide leadership to promote alignment, share best practices, and respondto evolving regulatory expectations.

Qualifications

• Bachelor's degree required; advanced degree preferred.
• Professional certification required (e.g., CHC, CHPC, CIPP/US).
• Minimum of 10 years of progressive experience in healthcare privacy, preferably within an academic medical center or large health system. Minimum of 3 years of leadership experience managing and developing teams, preferred.

Experience & Expertise

• Deep knowledge of HIPAA, HITECH, and applicable federal and California privacy laws governing PHI and PII.
• Demonstrated experience handling and managing privacy investigations, audits, monitoring programs, and risk assessments.
• Experience supporting privacy in research environments, including clinical trials and human subjects research.
• Familiarity with electronic health records (e.g., Epic/CareConnect) and healthcare data environments.
• Experience implementing and managing privacy tools, systems, and automated monitoring solutions.

Leadership Competencies

• Ability to operate effectively in a complex, matrixed academic health system.
• Strong analytical and problem-solving skills, with the ability to translate regulatory requirements into practical solutions.
• Exceptional written and verbal communication skills, including executive-level reporting and presentations.
• High level of integrity, professionalism, and discretion in handling sensitive information.
• Demonstrated ability to build relationships and influence across diverse stakeholder groups.

Required

Preferred

Job Industries

• Other