Senior Privacy Biostatistician - Risk Analytics

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Privacy Biostatistician – Risk Analytics based in the United States.

As a Senior Privacy Biostatistician – Risk Analytics, you will lead the development and implementation of advanced statistical privacy strategies to protect sensitive health data while preserving its research value. You will independently assess re-identification risks across complex datasets, including electronic health records, medical imaging, clinical notes, and emerging genomic information. You will play a critical role in applying HIPAA standards and developing robust statistical methodologies to support data de-identification and disclosure risk management. Working closely with Legal, Security, Clinical Informatics, and research teams, you will ensure that privacy decisions are scientifically sound, well-documented, and defensible under regulatory scrutiny. You will also mentor junior specialists, establish methodological standards, and contribute to the evolution of privacy analytics practices. This is an opportunity to shape the responsible use of large-scale health data in an innovative, research-driven technology environment.

Accountabilities:

• Lead the design and implementation of statistical disclosure control strategies for complex, high-dimensional, and multimodal healthcare datasets, including structured records, medical imaging, clinical notes, and genomic information.

• Independently conduct statistical disclosure risk assessments and, when appropriately qualified, sign Expert Determinations under HIPAA regulations (45 CFR §164.514(b)(1)), demonstrating that the risk of re-identification is very small.

• Develop, maintain, and document rigorous statistical methodologies that support defensible privacy decisions, ensuring that determinations can withstand independent review and regulatory audits.

• Own and continuously improve profile-level risk assessment methodologies, including dynamic k-anonymity thresholds, quasi-identifier prioritization, suppression hierarchies, and risk reassessment triggers.

• Collaborate with Clinical Informatics teams to evaluate modality-specific disclosure risks and work with Legal stakeholders on emerging privacy challenges, particularly those involving genomic data.

• Integrate HIPAA Security Rule considerations into Privacy Rule risk assessments, partnering with security leadership to account for infrastructure controls, evolving threats, and regulatory developments.

• Mentor and supervise Privacy Biostatisticians working toward independent Expert Determination authority, providing technical guidance, reviewing assessments, and maintaining documented records of their professional development.

• Partner with Legal and Contracts teams to establish supplementary recipient-side safeguards for datasets with higher residual risks, while ensuring that such controls complement rather than replace the required statistical determination.

• Drive continuous improvements in data utility and usability while maintaining appropriate privacy protections and managing residual disclosure risks across the data platform.

• Establish methodological best practices and represent the organization's privacy analytics expertise in discussions with internal stakeholders, external partners, and regulatory audiences.

Requirements:

• Master's degree in Biostatistics, Statistics, Epidemiology, or another closely related quantitative discipline. A PhD is considered an advantage.

• At least 6 years of experience applying statistical methods to patient health information, including substantial hands-on experience in statistical disclosure control and de-identification.

• Candidates with less formal experience may also qualify through demonstrated equivalent expertise, supported by a strong and documented history of independently drafted determinations, successful case reviews, and consistent co-signing confidence.

• Proven track record applying statistical de-identification methodologies to real-world healthcare datasets and evaluating re-identification risks using established scientific principles.

• Deep expertise in at least one non-structured data modality, such as medical imaging or clinical notes, in addition to structured electronic health records or claims data.

• Strong understanding of HIPAA Privacy Rule requirements and the ability to evaluate disclosure risks in conjunction with relevant Security Rule considerations.

• Ability to independently develop, defend, and document Expert Determinations, with the professional judgment and experience required to establish that re-identification risk is very small.

• Excellent analytical, statistical, and problem-solving skills, with the ability to translate complex quantitative findings into clear, defensible conclusions.

• Exceptional written and verbal communication skills, particularly the ability to produce comprehensive technical documentation suitable for audits and regulatory review.

• Demonstrated leadership and mentoring capabilities, including the ability to guide junior technical professionals and establish consistent methodological standards.

• Strong interpersonal and collaboration skills, with the ability to work effectively across technical, clinical, legal, security, and research teams.

Preferred Qualifications:

• Previous experience signing HIPAA Expert Determinations, either internally or as an external consultant, independent expert, or expert witness.

• Experience evaluating disclosure risks across linked datasets and multiple data modalities.

• Familiarity with process-oriented Expert Determinations and their practical implementation.

• Hands-on experience with statistical disclosure control tools such as sdcMicro and dynamic or continuously revalidated risk assessment methodologies.

• Working knowledge of clinical informatics and interoperability standards, including HL7, FHIR, and DICOM PS3.15 Annex E.

• Exposure to genomic data privacy challenges, including VCF-level re-identification risks and familial privacy considerations.

• Experience analyzing Real-World Data (RWD) in healthcare or clinical research environments.

• Contributions to scientific publications, research studies, technical reports, or other relevant professional work.

Benefits:

• Competitive Salary: Annual base salary ranging from $145,000 to $150,000 USD, as indicated in the original job posting. Compensation may vary depending on location, relevant experience, technical expertise, and qualifications.

• Additional Compensation: Certain positions may include performance-based incentives and stock options.

• Comprehensive Healthcare: Access to competitive medical, dental, and vision insurance plans.

• Retirement Planning: 401(k) retirement savings plan.

• Professional Development: Training opportunities and continuous learning support to encourage career growth and technical development.

• Flexible Working Arrangements: Flexible working hours and generous paid time off to support work-life balance.

• Parental Support: Generous parental leave benefits.

• Team Engagement: Regular virtual and in-person team activities designed to encourage collaboration and strengthen workplace relationships.

• Meaningful Work: Opportunity to contribute to innovative healthcare data initiatives with the potential to accelerate medical research, improve clinical decision-making, and support better patient outcomes.

• Inclusive Environment: Work within a collaborative culture that values diverse perspectives, professional growth, and equal opportunities.