Jobs › Health Care Service Corporation

Manager Privacy Office

Health Care Service Corporation · Chicago, IL · $92,700–$167,500 a year · Full time

Posted Jul 28, 2026 · We last checked this listing on Oct 6, 2026

Apply at Health Care Service Corporation

Likely interview questions for this role

Written from this job description, not a generic list. Each one notes what the interviewer is really checking.

About your past

Tell me about a time a new privacy regulation changed how a business process had to work. How did you assess the impact and get people to change?

What they are checking: Whether they can turn a legal change into concrete operational steps that business teams actually adopt.

How do you train someone new on your team to spot privacy risk in a contract they have never seen before?

What they are checking: Whether they can teach judgment, not just checklists, which the posting explicitly asks this manager to do.

Tell me about a complex privacy matter you resolved with Legal, Security or Compliance pulling in different directions.

What they are checking: Whether they can drive a cross-functional decision to closure instead of waiting for consensus that never comes.

What would you do

A large employer customer insists on privacy terms that go beyond what HIPAA requires and would be hard for HCSC operations to meet. How do you handle that negotiation?

What they are checking: Whether they can protect the company from promises it cannot keep while still keeping a valuable customer at the table.

You manage people who negotiate agreements as the privacy expert. How do you decide which agreements you take yourself and which you delegate?

What they are checking: Whether they triage by risk and priority and trust their team rather than bottlenecking every deal.

Two reviewers on your team reached different conclusions on the same data use clause. How do you resolve it and keep advice consistent?

What they are checking: Whether they build consistent positions across the team so the business hears one Privacy Office voice.

A business unit wants to launch a project next week and only now sends it to the Privacy Office. What do you do?

What they are checking: Whether they balance speed and compliance and fix the intake process so late requests stop happening.

About the work

Walk me through how you would review a vendor agreement that involves member PHI. What are you looking for first?

What they are checking: Whether they read a contract through a HIPAA lens and know which clauses actually protect member data.

When does a vendor need a business associate agreement, and when does it not?

What they are checking: Whether they understand the HIPAA business associate definition well enough to avoid both gaps and needless paperwork.

How do you keep track of state privacy laws that differ from HIPAA, and how do you decide which rule applies to a given process?

What they are checking: Whether they have a real method for preemption questions across states instead of guessing or defaulting to the strictest rule.

How do you explain the minimum necessary standard to a business partner who wants to share a full data set just to be safe?

What they are checking: Whether they can explain a core HIPAA principle in plain terms that changes what the business actually sends.

Practice this interview out loud.

Offer builds a real interview for this exact role at Health Care Service Corporation from your resume and this job description, asks the questions one at a time, and tells you what landed. The first one is free.

Practice this out loud

The full job description

As published by Health Care Service Corporation.

At HCSC, our employees are the cornerstone of our business and the foundation to our success. We empower employees with curated development plans that foster growth and promote rewarding, fulfilling careers. Join HCSC and be part of a purpose-driven company that will invest in your professional development. Job Summary This position is responsible for day-to-day management of team that is responsible for analyzing, drafting, and negotiating various agreements that the HCSC Privacy Office is asked to opine to ensure HCSC is compliant with various federal and state privacy regulations. This position both manages those responsible for supporting key privacy initiatives and projects and is often responsible for driving key privacy initiatives. This position is expected to analyze the applicable privacy laws, rules, and regulations including HIPAA, and assess the impact on HCSC operations and processes as well as guide and train others to do the same. This position will collaborate with other members of the HCSC Privacy Office and stakeholders across the organization to resolve complex privacy matters. This position manages those who act as the privacy subject matter expert for HCSC when negotiating with customers, vendors, and other third parties, and will be required to act as the privacy subject matter expert for higher priority agreements. Additionally, this position requires an understanding of the management of privacy and security incidents and investigations with mitigation and correct actions; daily management of wholly owned subsidiary privacy compliance including development and oversight of operational privacy policies and procedures, and breach notification and digital privacy and may be required to provide support in these areas. Job Requirements • Bachelor’s Degree and 6 years’ experience in healthcare, legal, privacy, or contracting; OR JD or MBA and 4 years of experience or equivalent degree; OR 10 years of relevant experience. • 2 years of direct supervision experience. • Knowledge and experience interpreting state/federal laws. • Experience with health care industry regulations. • PC proficiency to include Word, Excel, Access, and PowerPoint. • Ability to work with highly sensitive and confidential information. • Strong verbal and written communication skills, including interpersonal skills to work with peers or across departments to resolve issues or complete projects/initiatives. • Excellent facilitation, organizational, integration and presentations skills. Preferred Requirements • Knowledge of managing health care privacy breaches and incidents. • Knowledge of RadarFirst or similar compliance software experience. • Six sigma black belt certification or similar certification for process improvement. • HIPAA, Privacy, or Compliance certifications, such as CHP, CHC, CHPC, CIPP, PMP, LSS, etc. #LI-CH1 #LI-Hybrid INJLF Are you being referred to one of our roles? If so, ask your connection at HCSC about our Employee Referral process! Pay Transparency Statement: At Health Care Service Corporation, you will be part of an organization committed to offering meaningful benefits to our employees to support their life outside of work. From health and wellness benefits, 401(k) savings plan, pension plan, paid time off, paid parental leave, disability insurance, supplemental life insurance, employee assistance program, paid holidays, tuition reimbursement, plus other incentives, we offer a robust total rewards package for employees. Learn more about our benefit offerings by visiting https://careers.hcsc.com/totalrewards . The compensation offered will vary depending on your job-related skills, education, knowledge, and experience. This role aligns with an annual incentive bonus plan subject to the terms and the conditions of the plan. HCSC Employment Statement: We are an Equal Opportunity Employment employer dedicated to providing a welcoming environment where the unique differences of our employees are respected and valued. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other legally protected characteristics. Base Pay Range $92,700.00 - $167,500.00 Exact compensation may vary based on skills, experience, and location.

Apply at Health Care Service Corporation