Legal Compliance Senior Analyst

About the role

The Legal Compliance Senior Analyst serves as a pivotal member of the Office of Privacy and Innovation Governance, responsible for proactively researching, analyzing, and reporting on privacy incidents, including unauthorized disclosures and data breaches. This role requires advanced critical and strategic thinking to collaborate cross-functionally with business units, legal, compliance, and technology teams to identify root causes, implement corrective actions, and establish preventative measures that minimize organizational risk and drive continuous improvement.

The Legal Compliance Senior Analyst ensures the integrity and reliability of incident data used for executive-level reporting and supports the identification of recurring issues to inform risk mitigation strategies. This position also evaluates the effectiveness of preventative controls and partners with operational leaders to ensure adherence to privacy best practices and the successful implementation of corrective actions. The Legal Compliance Senior Analyst contributes to the achievement of strategic compliance objectives by supporting audits, privacy training initiatives, and regulatory engagement.

The Legal Compliance Senior Analyst also provides dedicated, high-touch incident support for designated clients, requiring a high degree of responsiveness, adaptability, and urgency when potential or suspected privacy incidents arise.

Key Duties and Responsibilities

• Lead the research, management, and resolution of privacy issues presented to the Privacy Office.
• Support and deliver privacy compliance training programs; perform auditing and monitoring activities to ensure ongoing adherence to regulatory requirements and internal policies.
• Prepare and issue required notifications to clients, business partners, and government regulators in accordance with applicable laws.
• Analyze privacy incident trends, identify emerging risks, and engage with stakeholders to develop data-driven risk mitigation plans.
• Assess potential and confirmed privacy incidents, determine appropriate resolutions, and coordinate timely response efforts.
• Partner with internal departments to promote privacy best practices and oversee the implementation of corrective actions.
• Serve as a subject matter expert and privacy resource for internal and external partners.
• Support strategic compliance initiatives, including internal audits, policy development, and employee training.
• Provide dedicated, high-touch incident response support for designated clients, ensuring prompt attention to potential or confirmed privacy incidents and client-specific notification requirements.
• Coordinate and issue time-sensitive preliminary and ongoing incident notifications to clients in accordance with contractual requirements and established notification timelines.
• Maintain a high degree of responsiveness and flexibility to address time-sensitive privacy incidents as they arise.

Qualifications

• Bachelor's degree
• 3+ years of Healthcare and/or PBM privacy and compliance experience required
• Demonstrated competency in privacy incident management and risk assessment.
• Strong analytical, communication, and interpersonal skills; proven ability to work cross-functionally and influence stakeholders.
• Knowledge of State and Federal breach notification laws, including HIPAA.
• Demonstrated competency with privacy management software and incident tracking tools.
• Ability to manage multiple priorities in a fast-paced, matrixed environment and adapt to evolving regulatory requirements.
• This is a business funded role.

Additional information

If you will be working at home occasionally or permanently, the internet connection must be obtained through a cable broadband or fiber optic internet service provider with speeds of at least 10Mbps download/5Mbps upload.

Pay and benefits

For this position, we anticipate offering an annual salary of 62,800 - 104,600 USD / yearly, depending on relevant factors, including experience and geographic location.

This role is also anticipated to be eligible to participate in an annual bonus plan.

At The Cigna Group, you'll enjoy a comprehensive range of benefits, with a focus on supporting your whole health. Starting on day one of your employment, you'll be offered several health-related benefits including medical, vision, dental, and well-being and behavioral health programs. We also offer 401(k), company paid life insurance, tuition reimbursement, a minimum of 18 days of paid time off per year, paid holidays, and leaves of absence. For more details on our employee benefits programs,