Principal Privacy Biostatistician - Risk Analytics

Principal Privacy Biostatistician - Risk Analytics

Truveta transforms healthcare into intelligence. Built with and owned by US health systems united by a mission of Saving Lives with Data, Truveta powers breakthrough discoveries, auditable data fit for regulatory submissions, and AI that improves patient care.

At Truveta, we are building something that has never existed before, bringing together healthcare, science, and technology to tackle some of the most important challenges in human health. Our mission calls us to think big, move with urgency, and build with purpose. We are looking for exceptional people who are energized by hard problems, inspired by the opportunity to improve health, and committed to building a company and culture where talented people can do their best work.

Our team is a special combination of software, health, and big data experience. We are building a talented team of passionate, mission-oriented, and innovative thinkers.

Truveta was born in the Pacific Northwest, but we have employees who live across the country.  Our team enjoys the flexibility of a hybrid model and working from anywhere.  In person attendance is required at least once per year for an onsite meeting.

For overall team productivity, we optimize meeting hours in the pacific time zone. We avoid scheduling recurring meetings that start after 3pm PT, however, ad hoc meetings occur between 8am-6pm Pacific time. #LI-remote

Who We Need

We're looking for a principal-level statistical privacy expert who sets the direction for disclosure risk strategy across Truveta's entire data platform — structured, imaging, clinical notes, and emerging areas like genomic data — and who already holds the judgment, track record, and credibility to sign Expert Determinations under HIPAA. Beyond deep technical mastery, we're seeking a recognized leader who defines the methodological standards others follow, serves as the final technical authority on the most complex and novel determinations, develops senior and junior team members toward independent signing authority, and represents Truveta's privacy rigor to health system partners, customers, regulators, and the broader scientific community.

This Opportunity

The Principal Privacy Biostatistician reports to the Senior Director of Risk Analytics and serves as the senior technical authority for statistical disclosure control across Truveta. This individual owns the de-identification methodology framework for the platform, signs Expert Determinations under 45 CFR §164.514(b)(1) for the highest-complexity, highest-visibility, and first-of-their-kind data products, and acts as the final reviewer and co-signer for determinations prepared by other members of the team.

There is no professional license or certification that confers this signing authority — it is earned through demonstrated, documented judgment, expertise and experience. This role is designed for someone who already holds that track record, has defended their determinations under scrutiny, and is ready to shape how the organization exercises that authority at scale.

Responsibilities:

- Set the vision and own the end-to-end statistical disclosure control framework for Truveta's data platform, defining the methodological standards, risk thresholds, and documentation requirements used by the entire Risk Analytics team.

- Serve as a signing Expert Determiner for the most complex, novel, and high-visibility data products, applying generally accepted statistical and scientific principles to determine that re-identification risk is "very small," and documenting the reasoning to a standard that stands on its own under audit, regulatory review, or legal challenge.

- Act as the final technical reviewer and co-signer for Expert Determinations prepared by Senior and staff Privacy Biostatisticians; establish and run the peer review and case-defense process that governs the team's signing authority.

- Lead the development of risk methodology for new and emerging data modalities (e.g., genomic data, linked multi-modality data, and AI/ML-derived data products), partnering with clinical informatics, Legal, and Product to define Truveta's approach before these products go to market.

- Own and continuously evolve profile-level risk justification methodology — dynamic k-anonymity thresholds, quasi-identifier importance ranking, suppression hierarchies, drift-triggered re-determination thresholds, and process-level Expert Determinations — ensuring it scales with platform growth.

- Integrate Truveta's HIPAA Security Rule posture into Privacy Rule risk determinations; partner with security and engineering leadership to influence infrastructure, architecture, and regulatory change strategy.

- Partner with Legal/Contracts to define the organization's standards for supplementary recipient-side controls on higher-residual-risk modalities, while consistently reinforcing that these controls do not serve as a substitute for the statistical "very small risk" determination.

- Represent Truveta as the privacy statistics subject-matter expert with health system members, customers, auditors, and regulators; contribute to external publications, conference presentations, and industry standards.

- Mentor and develop Senior and staff Privacy Biostatisticians, building a clear, documented pathway toward independent signing authority and growing the team's overall bench strength.

- Influence product and data strategy by identifying opportunities to improve data utility and usability while managing residual risk and mitigating controls across the platform.

Key Qualifications

- PhD in biostatistics, statistics, epidemiology, or related quantitative field; or Master's degree with equivalent depth of experience and demonstrated technical leadership.

- 10+ years of experience in statistical methods applied to patient health information, including extensive hands-on experience in statistical disclosure control and de-identification.

- Prior formal Expert Determination signing experience under HIPAA (internal or as an external consultant/expert witness), with a documented case history across multiple data modalities.

- Proven track record of defining and implementing de-identification methodology at an organizational or platform level, not just on individual datasets.

- Deep experience with multiple non-structured data modalities (imaging and/or clinical notes) in addition to structured EHR/claims data, including risk across linked modalities.

- Expert-level ability to reason across the HIPAA Privacy Rule / Security Rule boundary when estimating risk.

- Exceptional written and verbal communication skills, including producing documentation that stands alone under audit and explaining complex risk concepts to executives, partners, and regulators.

- Experience analyzing Real World Data in a research setting.

- Demonstrated success mentoring senior technical staff and developing others toward independent signing authority.

Preferred Qualifications

- Experience defending Expert Determinations in regulatory, audit, litigation, or expert-witness settings.

- Experience designing and governing process Expert Determinations at scale.

- Advanced hands-on experience with SDC tools such as sdcMicro and dynamic/continuously-revalidated risk methodologies.

- Working familiarity with clinical informatics standards (HL7, FHIR, DICOM PS3.15 Annex E).

- Hands-on experience with genomic data privacy (e.g., VCF-level re-identification risk, familial risk, etc.).

- Record of peer-reviewed publications, conference presentations, or contributions to industry standards in privacy, disclosure control, or health data.

- Experience building or leading a privacy statistics or risk analytics function.

Why Truveta?

Be a part of building something special. Now is the perfect time to join Truveta. We have strong, established leadership with decades of success. We are well-funded. We are building a culture that prioritizes people and their passions across personal, professional and everything in between. Join us as we build an amazing company together.

We Offer:

- Interesting and meaningful work for every career stage

- Great benefits package

- Comprehensive benefits with strong medical, dental and vision insurance plans

- 401K plan

- Professional development & training opportunities for continuous learning

- Work/life autonomy via flexible work hours and flexible paid time off

- Generous parental leave

- Regular team activities (virtual and in-person)

- The base pay for this position is $160,000 to $180,000. The pay range reflects the minimum and maximum target. Pay is based on several factors including location and may vary depending on job-related knowledge, skills, and experience. Certain roles are eligible for additional compensation such as incentive pay and stock options.

If you are based in California, we encourage you to read this important information for California residents linked here.

Truveta is committed to creating a diverse, inclusive, and empowering workplace. We believe that having employees, interns, and contractors with diverse backgrounds enables Truveta to better meet our mission and serve patients and health communities around the world. We recognize that opportunities in technology historically excluded and continue to disproportionately exclude Black and Indigenous people, people of color, people from working class backgrounds, people with disabilities, and LGBTQIA+ people. We strongly encourage individuals with these identities to apply even if you don’t meet all of the requirements.

Please note that all applicants must be authorized to work in the United States for any employer as we are unable to sponsor work visas or permits (e.g., F ‑ 1 OPT, H ‑ 1B) at this time. We appreciate your interest in the position and encourage you to explore future opportunities with us.