> Markdown version of [/jobs/ext/2554840-why-you-ll-love-it-here](https://www.wearedevelopers.com/jobs/ext/2554840-why-you-ll-love-it-here). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Why you'll love it here! - **Company:** State of Oklahoma - **Location:** Oklahoma County, OK, United States - **Experience:** Expert - **Salary:** $99,000.0 - **Contract:** Permanent contract - **Skills:** Cyber Security, Information Systems, Data Sharing, Privacy Controls - **Published:** August 6, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=5a96b4e28aa9de20 ## About the Role Education and Experience requirements at this level consists of: Bachelor's degree in Business Administration, Information Systems, Healthcare Administration, Legal studies, Cybersecurity or related field; and Five (5) years experience working in privacy, compliance, information governance, risk management, healthcare operations, information security, or a related field. An applicant with a master's degree or Juris Doctor may substitute up to two years of experience to meet the required experience. Preferred Qualifications Knowledge and understanding of data protection laws, such as HIPAA and related Federal and State privacy laws and regulations preferred. Experience in conducting privacy risk assessments, compliance reviews, investigation, breach response activities, and corrective action planning. Application Requirements: * If education, certification or licensure is required to meet qualifications, applicants must provide documentation at the time of application. All applicants are subject to a background check and must be legally authorized to work in the United States without visa sponsorship. Physical Demands and Work Environment: Work is typically performed in an office setting with climate-controlled settings and exposure to moderate noise levels. While performing the duties of the job, employees are required to talk, stand, walk, and reach with hands and arms. This position requires long periods of sitting and daily use of computers and phones. Employees must be willing to complete all job-related travel associated with this position. Being present at the office is an essential function of the job. ## Description The HIPAA Privacy Officer will be within the Office of the General Counsel, responsible for leading and overseeing the agency's privacy program, ensuring compliance with Health Insurance Portability and Accountability Act (HIPAA), 42 CFR Part 2 and other applicable state and federal regulations. This position provides strategic guidance to OSDH leadership and oversees the continuous improvement of privacy controls, processes, and services to support organizational and regulatory requirements. This role manages privacy risk, breach response, and regulatory reporting while promoting a culture of confidentiality, security and compliance. Position Responsibilities/Essential Functions: The specific functions of this position vary, but may include the following: * Oversees the establishment, implementation, maintenance of, and adherence to privacy policies and procedures; continually ensures that policies and procedures are in current compliance with Federal and State laws and regulations. * Coordinates with OSDH leadership regarding the review of practices that may impact compliance with the Privacy Rule of HIPAA. * Performs periodic risk analysis, internal audits and assessments of policies and procedures, staff activities, training programs; determines remediation priorities and resources necessary to address existing or potential privacy issues and problems. * Establishes and administers a process for receiving, documenting, tracking, investigating, and coordinating responses for all complaints and issues pertaining to privacy compliance. * Coordinates responses to compliance assessments or investigating initiated by HHS' Office of Civil Rights or State Attorney General and monitor regulatory updates to ensure the agency remains aligned with federal privacy and any state regulations that overlay HIPAA. * Drafts and approves Business Associate Agreements, Data Use Agreements, and Data Sharing Agreements. * Consult with legal counsel, as necessary, regarding privacy standard and other applicable federal and state law. * Ensure mandatory and ongoing education and training programs for all members OSDH, including when material changes are made to the privacy policies and procedures. * Organizes and maintains all privacy policies and procedures. * Reviews contracts, data or sharing agreements, and policies to ensure legal and regulatory compliance. * Advises on risk mitigation for privacy and cybersecurity issues, ensuring legal obligations are met while protecting sensitive data. * Role may include participation in governance committees. * Being present at the office is an essential function of the job. * Other duties as assigned. Essential Functions * Knowledge and understanding of data protection laws, such as HIPAA and related Federal and State privacy laws and regulations. * Experience with policy development and conducting privacy risk assessments. * Strong understanding of information security principles and best practices. * Strong analytical, investigative, communication and leadership skills. Other Duties * Demonstrates knowledge of and supports mission, vision, value statements, standards, policies and procedures, operating instructions, confidentiality standards, and the code of ethical behavior. * Works effectively in team environment, participating and assisting their peers. This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice. ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Building the platform for providing ML predictions based on real-time player activity](https://www.wearedevelopers.com/videos/944-building-the-platform-for-providing-ml-predictions-based-on-real-time-player-activity) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Smart City, Smart Mobility](https://www.wearedevelopers.com/videos/954-smart-city-smart-mobility) - [WeAreDevelopers LIVE - The Shape of SVG to Come!](https://www.wearedevelopers.com/videos/1938-wearedevelopers-live-the-shape-of-svg-to-come) - [An alternative approach to digital sovereignty: Confidential Computing](https://www.wearedevelopers.com/videos/100043-an-alternative-approach-to-digital-sovereignty-confidential-computing) ## Related Articles - [UK Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/326-uk-business-culture-and-etiquette) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)