Principal Privacy Biostatistician - Risk Analytics

The role

The Principal Privacy Biostatistician sets the direction for disclosure risk strategy across the data platform. This person owns the de-identification methodology framework and signs Expert Determinations under HIPAA.

What you will do

• Set the vision and own the end-to-end statistical disclosure control framework.
• Serve as a signing Expert Determiner for complex and high-visibility data products.
• Act as the final technical reviewer and co-signer for Expert Determinations.
• Lead the development of risk methodology for new and emerging data modalities.
• Own and evolve profile-level risk justification methodology.
• Integrate HIPAA Security Rule posture into Privacy Rule risk determinations.
• Partner with Legal/Contracts to define standards for recipient-side controls.
• Represent Truveta as the privacy statistics subject-matter expert.
• Mentor and develop Senior and staff Privacy Biostatisticians.
• Influence product and data strategy to improve data utility and usability.

Required qualifications

• PhD in biostatistics, statistics, epidemiology, or related quantitative field; or Master's degree with equivalent depth of experience and demonstrated technical leadership.
• 10+ years of experience in statistical methods applied to patient health information, including extensive hands-on experience in statistical disclosure control and de-identification.
• Prior formal Expert Determination signing experience under HIPAA.
• Proven track record of defining and implementing de-identification methodology at an organizational or platform level.
• Deep experience with multiple non-structured data modalities (imaging and/or clinical notes) in addition to structured EHR/claims data.
• Expert-level ability to reason across the HIPAA Privacy Rule / Security Rule boundary.
• Exceptional written and verbal communication skills.
• Experience analyzing Real World Data in a research setting.
• Demonstrated success mentoring senior technical staff.

Nice to have

• Experience defending Expert Determinations in regulatory, audit, litigation, or expert-witness settings.
• Experience designing and governing process Expert Determinations at scale.
• Advanced hands-on experience with SDC tools such as sdcMicro and dynamic/continuously-revalidated risk methodologies.
• Working familiarity with clinical informatics standards (HL7, FHIR, DICOM PS3.15 Annex E).
• Hands-on experience with genomic data privacy.
• Record of peer-reviewed publications, conference presentations, or contributions to industry standards.
• Experience building or leading a privacy statistics or risk analytics function.

Benefits

• Great benefits package
• Comprehensive benefits with strong medical, dental and vision insurance plans
• 401K plan
• Professional development & training opportunities
• Work/life autonomy via flexible work hours and flexible paid time off
• Generous parental leave
• Regular team activities (virtual and in-person)

Before you apply

• All applicants must be authorized to work in the United States.
• Unable to sponsor work visas or permits at this time.

About the company

Truveta transforms healthcare into intelligence. Built with and owned by US health systems, Truveta powers breakthrough discoveries, auditable data, and AI that improves patient care.