Legal Compliance Senior Analyst

The Legal Compliance Senior Analyst serves as a pivotal member of the Office of Privacy and Innovation Governance, responsible for proactively researching, analyzing, and reporting on privacy incidents, including unauthorized disclosures and data breaches. This role requires advanced critical and strategic thinking to collaborate cross-functionally with business units, legal, compliance, and technology teams to identify root causes, implement corrective actions, and establish preventative measures that minimize organizational risk and drive continuous improvement.

The Legal Compliance Senior Analyst ensures the integrity and reliability of incident data used for executive-level reporting and supports the identification of recurring issues to inform risk mitigation strategies. This position also evaluates the effectiveness of preventative controls and partners with operational leaders to ensure adherence to privacy best practices and the successful implementation of corrective actions. The Legal Compliance Senior Analyst contributes to the achievement of strategic compliance objectives by supporting audits, privacy training initiatives, and regulatory engagement.

The Legal Compliance Senior Analyst also provides dedicated, high-touch incident support for designated clients, requiring a high degree of responsiveness, adaptability, and urgency when potential or suspected privacy incidents arise.

Key Duties and Responsibilities

• Lead the research, management, and resolution of privacy issues presented to the Privacy Office.
• Support and deliver privacy compliance training programs; perform auditing and monitoring activities to ensure ongoing adherence to regulatory requirements and internal policies.
• Prepare and issue required notifications to clients, business partners, and government regulators in accordance with applicable laws.
• Analyze privacy incident trends, identify emerging risks, and engage with stakeholders to develop data-driven risk mitigation plans.
• Assess potential and confirmed privacy incidents, determine appropriate resolutions, and coordinate timely response efforts.
• Partner with internal departments to promote privacy best practices and oversee the implementation of corrective actions.
• Serve as a subject matter expert and privacy resource for internal and external partners.
• Support strategic compliance initiatives, including internal audits, policy development, and employee training.
• Provide dedicated, high-touch incident response support for designated clients, ensuring prompt attention to potential or confirmed privacy incidents and client-specific notification requirements.
• Coordinate and issue time-sensitive preliminary and ongoing incident notifications to clients in accordance with contractual requirements and established notification timelines.
• Maintain a high degree of responsiveness and flexibility to address time-sensitive privacy incidents as they arise.

Qualifications

• Bachelor’s degree
• 3+ years of Healthcare and/or PBM privacy and compliance experience required
• Demonstrated competency in privacy incident management and risk assessment.
• Strong analytical, communication, and interpersonal skills; proven ability to work cross-functionally and influence stakeholders.
• Knowledge of State and Federal breach notification laws, including HIPAA.
• Demonstrated competency with privacy management software and incident tracking tools.
• Ability to manage multiple priorities in a fast-paced, matrixed environment and adapt to evolving regulatory requirements.
• This is a business funded role.

This role is also anticipated to be eligible to participate in an annual bonus plan.

At The Cigna Group, you’ll enjoy a comprehensive range of benefits, with a focus on supporting your whole health. Starting on day one of your employment, you’ll be offered several health-related benefits including medical, vision, dental, and well-being and behavioral health programs. We also offer 401(k), company paid life insurance, tuition reimbursement, a minimum of 18 days of paid time off per year, paid holidays, and leaves of absence. For more details on our employee benefits programs, click here.

About The Cigna Group

Qualified applicants will be considered without regard to race, color, age, disability, sex, childbirth (including pregnancy) or related medical conditions including but not limited to lactation, sexual orientation, gender identity or expression, veteran or military status, religion, national origin, ancestry, marital or familial status, genetic information, status with regard to public assistance, citizenship status or any other characteristic protected by applicable equal employment opportunity laws.

If you need a reasonable accommodation to complete the online application process, please email seeyourself@thecignagroup.com for assistance. Please note that this email inbox is dedicated to accommodation requests only and cannot provide application updates or accept resumes.

The Cigna Group has a tobacco-free policy and reserves the right not to hire tobacco/nicotine users in states where that is legally permissible. Candidates in such states who use tobacco/nicotine will not be considered for employment unless they enter a qualifying smoking cessation program prior to the start of their employment. These states include: Alabama, Alaska, Arizona, Arkansas, Delaware, Florida, Georgia, Hawaii, Idaho, Iowa, Kansas, Maryland, Massachusetts, Michigan, Nebraska, Ohio, Pennsylvania, Texas, Utah, Vermont, and Washington State.

Qualified applicants with criminal histories will be considered for employment in a manner consistent with all federal, state and local ordinances.