[Hiring] Sr Program Manager, Data Privacy @HealthEquity

Role Description

The Sr Program Manager, Data Privacy is responsible for managing the ongoing development and maintenance of HealthEquity’s privacy program, including:

• Development of policies, procedures, privacy controls, training, privacy reviews, and cross-functional business initiatives related to data privacy.
• Working closely with security, legal, compliance, and stakeholders across the company to research, develop, and implement privacy processes, procedures, and use cases.
• Ensuring compliance with applicable privacy laws, regulations, company policies, and best practices.

What you’ll be doing:

• Manage day-to-day operation of assigned privacy program workflows, including intake, triage, documentation, evidence management, issue tracking, and escalation support.
• Lead day-to-day coordination of the privacy workstream for incidents, including fact gathering, privacy impact analysis support, documentation, and remediation tracking.
• Serve as a primary privacy point of contact for assigned business initiatives and operational privacy matters.
• Lead and support information-gathering efforts related to HealthEquity’s complex data environment.
• Develop and maintain expertise in applicable state and federal privacy laws and regulations.
• Maintain policies, procedures, standards, templates, playbooks, and review standards to ensure company compliance.
• Conduct companywide privacy assessments (NIST, HIPAA, GLBA, etc.) and support Privacy Impact Assessment (PIAs) program.
• Identify privacy controls and manage privacy risks; assess control effectiveness.
• Develop training and awareness materials educating workforce on key privacy concepts.
• Conduct privacy review of vendor, partner, client, and data-sharing arrangements.
• Assess vendor and software technologies and applications for privacy risks and compliance.
• Support implementation of privacy tooling, automation, and workflow improvements.
• Maintain “regulator-ready” toolkits for response to regulator inquiries.
• Work with Product and HR teams to implement compliance (Privacy by Design).
• Own or support day-to-day individual rights request operations.
• Maintain operational dashboards, metrics, and reporting inputs for privacy reviews.
• Support audits, regulatory inquiries, client diligence, and internal assurance activities.

Qualifications

• Bachelor’s Degree, focus on technology or a related field is required.
• Juris Doctorate strongly preferred.
• 8+ years of professional experience in a role involving privacy, legal, or compliance.
• Strong understanding of HIPAA, GLBA, privacy-by-design, data governance, and risk-based privacy practices.
• Ability to translate legal, regulatory, and policy requirements into operational processes.
• Experience conducting privacy assessments and documenting risks.
• Working knowledge of data inventories, mapping, classification, and secure data handling.
• Experience supporting vendor, partner, and data-sharing reviews.
• Comfort working with automation and AI-assisted tools.
• Familiarity with privacy issues related to AI, machine learning, and advanced analytics.
• Experience using platforms such as Graphite Connect, OneTrust, AuditBoard, Salesforce, or similar tools.
• Strong judgment, stakeholder management, and professional presence.

Requirements

• Ability to communicate clearly and credibly on complex or high-visibility matters.

Benefits

• Medical, dental, and vision.
• HSA contribution and match.
• Dependent care FSA match.
• Uncapped paid time off.
• Paid parental leave.
• 401(k) match.
• Personal and healthcare financial literacy programs.
• Ongoing education & tuition assistance.
• Gym and fitness reimbursement.
• Wellness program incentives.