Hipaa Privacy Analyst Jobs in Virginia (NOW HIRING)

As an employee, you Turn Change Into Value - for our clients, for our company, for your professional growth, and for the consumers. We hire the best and brightest, who are driven to create lasting value. At xScion, you aren't just another team member, you're impactful. You're empowered. You're driven. You're an xScioneer.

xScion is seeking an Data Lead: Analytics, Governance & Security to work on an xScion project team with one of our clients. This candidate leads analytics enablement, the governance framework, and the security model for the Data Hub. Ensures highly sensitive benefits and health data is governed, protected, and usable for OEB's priority reporting and compliance use cases - with particular focus on HIPAA, privacy, retention, and audit readiness

As a Data Lead, You Will:

• Define priority reporting and analytics use cases (360 participant view, pension calculations, compliance analytics, inactive population communications) and map them to data, security, and tooling requirements
• Establish the Data Hub governance framework: data classification, stewardship roles, approval workflows, retention rules, and incident/breach support aligned with OEB and Federal Reserve policies
• Map regulatory obligations (HIPAA, applicable state benefits laws) to concrete controls, policies, monitoring processes, and evidence expectations within the Data Hub operating model
• Recommend and oversee cataloging, lineage, and access-control approaches (Unity Catalog, AWS Glue Data Catalog, RBAC/ABAC) to support discoverability, traceability, and least-privilege access
• Define fine-grained security patterns: RBAC/ABAC, encryption, key management, logging, and monitoring for highly sensitive data
• Produce audit-ready evaluation reports summarizing compliance posture, risks, mitigations, and supporting evidence for internal audits and external reviews
• Partner with Architecture/Ingestion lead and IV&V lead to ensure governance and security requirements are built into ingestion patterns, data models, and testing from the outset.

To Be Successful, You Need:

• Permanent Residency or US Citizenship
• Bachelor's degree in Computer Science, Information Systems, Business IT Management or equivalent practical experience
  
• 7+ years in data governance, compliance, or information management with direct responsibility for governance framework delivery
• Deep working knowledge of HIPAA Privacy and Security Rules as applied to health and benefits data
• Experience building data governance frameworks: classification, stewardship, approval workflows, and retention policy
• Familiarity with cataloging and access-control tooling - Unity Catalog, AWS Glue Data Catalog, Collibra, Alation, or equivalent
• Experience with RBAC/ABAC design and fine-grained security controls for cloud data platforms
• Ability to produce audit-ready compliance documentation: posture assessments, risk/mitigation evidence packages
• Experience mapping regulatory obligations (HIPAA, state-level benefits law) to data platform controls and monitoring.

Nice to Have:

• Prior work in Federal Reserve, OCC, FDIC, or other financial regulatory environments
• Experience with Databricks Unity Catalog or AWS Lake Formation for fine-grained access control
• CIPP, CIPM, CISSP, or equivalent privacy/security certification
• Background in defined benefit or defined contribution plan compliance.

Why xScion?

• We have an amazing culture- We were namedBest Places to Work in Virginia7 times, including 2025.
• We are poised for rapid growth- We are on the cutting edge of digital transformation in Financial Services, Healthcare, Nonprofit and Public Sector and continuously welcome new clients to the xScion family.
• We believe in your continuous development- We invest in our teams' development, including our Communities of Practice, technology partnerships, sandbox and paying for certifications and trainings to improve their skills because we are committed to collectively being the best at what we do.
• We want you to make an impact in whatever you do- Our people are given the opportunity to provide impactful change to our clients and team.
• We believe in equality
  - As a woman-owned organization, we believe in an inclusive and diverse culture where everyone's uniqueness makes us stronger.
• Great Benefits: Medical, dental, 401(k) match, flexible spending and more, but we also have unique perks such as up to 27 days off a year (including your birthday!), remote work opportunities, parental leave, wellness benefits and many other things that inspire balance and flexibility.

We're Transforming RegTech Organizations:

At xScion, we Turn Change Into Value. We help clients in highly regulated industries start or accelerate their digital transformation initiatives by shifting their mindset and goals into smaller, actionable steps that create lasting value. With more than 20 years of experience supporting Regulatory Technology (RegTech), xScion provides both domain experts and tailored solutions to help organizations navigate complex compliance and technology requirements. We specialize in Business Agility, Cloud Transformation, and Organizational Change Management solutions for clients in Financial Services, Public Sector, Nonprofits, and Healthcare. Our experts help prepare and create change to clients' processes, technology and culture in order to improve operational efficiencies and the customer experience. As a certified Woman-Owned Small Business, we are proud to be the most trusted solutions partner that business and technology leaders count on to deliver lasting, impactful value.

All qualified applicants will receive consideration for employment and will not be discriminated against on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or protected veteran status. xScion takes affirmative action in support of its policy to employ and advance in employment individuals who are minorities, women, protected veterans and individuals with disabilities.

You will be added to our talent community when you apply for this job. You may opt-out at any time.

Want to Learn More about xScion?

Check us out onwww.xscion.comor socially atLinkedIn,Twitter, andGlassdoor.