Senior Privacy Biostatistician - Risk Analytics

Senior Privacy Biostatistician - Risk Analytics

Truveta transforms healthcare into intelligence. Built with and owned by US health systems united by a mission of Saving Lives with Data, Truveta powers breakthrough discoveries, auditable data fit for regulatory submissions, and AI that improves patient care.

At Truveta, we are building something that has never existed before, bringing together healthcare, science, and technology to tackle some of the most important challenges in human health. Our mission calls us to think big, move with urgency, and build with purpose. We are looking for exceptional people who are energized by hard problems, inspired by the opportunity to improve health, and committed to building a company and culture where talented people can do their best work.

Our team is a special combination of software, health, and big data experience. We are building a talented team of passionate, mission-oriented, and innovative thinkers.

Truveta was born in the Pacific Northwest, but we have employees who live across the country. Our team enjoys the flexibility of a hybrid model and working from anywhere. In person attendance is required at least once per year for an onsite meeting.

For overall team productivity, we optimize meeting hours in the pacific time zone. We avoid scheduling recurring meetings that start after 3pm PT, however, ad hoc meetings occur between 8am-6pm Pacific time. #LI-remote

Who We Need

We're looking for a senior statistical privacy expert who can independently lead disclosure risk strategy across increasingly complex data modalities: structured, imaging, clinical notes, and emerging areas like genomic data, and who can build toward (or already holds) the judgment and track record required to sign Expert Determinations under HIPAA. Beyond core technical capability, we're seeking someone who can mentor junior team members, set methodological standards, and represent Truveta's privacy rigor to partners and regulators.

This Opportunity

The Sr. Privacy Biostatistician reports to the Senior Director of Risk Analytics and independently leads statistical disclosure control strategy for complex, high-visibility, and novel-modality data products; and, where individually qualified, signs Expert Determinations under 45 CFR §164.514(b)(1).

There is no professional license or certification that confers this signing authority; it is earned through demonstrated, documented judgment, expertise and experience. This role is designed for someone who already has (or is very close to having) that track record.

Responsibilities:

Independently design and lead statistical disclosure control strategies for complex, high-dimensional, and/or multi-modality health datasets (structured, imaging, clinical notes, and emerging modalities such as genomic data).

Serve as a signing Expert Determiner who applies generally accepted statistical and scientific principles to determine the re-identification risk is "very small." The individual should then be able to document the reasoning to a standard that stands on its own under an audit.

Own profile-level risk justification methodology — dynamic k-anonymity thresholds, quasi-identifier importance ranking, suppression hierarchies, and drift-triggered re-determination thresholds.

Partner with clinical informatics and teams on modality-specific risk, and with Legal on emerging modalities such as genomic data.

Incorporate Truveta’s HIPAA Security Rule posture into Privacy Rule risk determinations; partner with security leadership on infrastructure and regulatory change.

Mentor and supervise Privacy Biostatisticians building toward independent signing authority; co-sign their work and maintain documentation of their case history.

Partner with Legal/Contracts on supplementary recipient-side controls for higher-residual-risk modalities and incorporate these controls in the determination. The individual should routinely emphasize that these controls do not serve as a substitute for the statistical "very small risk" determination.

Drive continual improvements in data utility and data usability while managing residual risk and mitigating controls across the platform.

Key Qualifications

Master's degree in biostatistics, statistics, epidemiology, or related quantitative field (PhD a plus).

6+ years of experience in statistical methods applied to patient health information, including significant hands-on experience in statistical disclosure control; or demonstrated equivalent competency reflected in an accelerated, documented case history, e.g., independently drafted determinations across multiple data modalities, strong case-defense review performance, and consistent co-signer confidence — for candidates with less tenure but a compressed, high-intensity development trajectory.

Demonstrated, documentable track record applying de-identification methodology to real datasets.

Deep experience with at least one non-structured data modality (imaging or clinical notes) in addition to structured EHR/claims data.

Demonstrated ability to reason across the HIPAA Privacy Rule / Security Rule boundary when estimating risk.

Excellent written and verbal skills, with demonstrated ability to produce documentation that would stand alone under audit.

Demonstrated ability to mentor junior technical staff.

Preferred Qualifications

Prior formal Expert Determination signing experience (internal or as an external consultant/expert witness).

Experience with analyzing risk across linked data modalities.

Experience with process Expert Determinations.

Hands-on experience with SDC tools such as sdcMicro and dynamic/continuously-revalidated risk methodologies.

Working familiarity with clinical informatics standards (HL7, FHIR, DICOM PS3.15 Annex E).

Exposure to genomic data privacy considerations (e.g., VCF-level re-identification risk, familial risk, etc.).

Experience in analyzing Real World Data in a research setting.

Evidence of participation in publications, studies, or reports.

Why Truveta?

Be a part of building something special. Now is the perfect time to join Truveta. We have strong, established leadership with decades of success. We are well-funded. We are building a culture that prioritizes people and their passions across personal, professional and everything in between. Join us as we build an amazing company together.

We Offer:

Interesting and meaningful work for every career stage

Great benefits package

Comprehensive benefits with strong medical, dental and vision insurance plans

401K plan

Professional development & training opportunities for continuous learning

Work/life autonomy via flexible work hours and flexible paid time off

Generous parental leave

Regular team activities (virtual and in-person)

The base pay for this position is $150,000 to $165,000. The pay range reflects the minimum and maximum target. Pay is based on several factors including location and may vary depending on job-related knowledge, skills, and experience. Certain roles are eligible for additional compensation such as incentive pay and stock options.

If you are based in California, we encourage you to read this important information for California residents linked here.

Truveta is committed to creating a diverse, inclusive, and empowering workplace. We believe that having employees, interns, and contractors with diverse backgrounds enables Truveta to better meet our mission and serve patients and health communities around the world. We recognize that opportunities in technology historically excluded and continue to disproportionately exclude Black and Indigenous people, people of color, people from working class backgrounds, people with disabilities, and LGBTQIA+ people. We strongly encourage individuals with these identities to apply even if you don’t meet all of the requirements.

Please note that all applicants must be authorized to work in