Privacy and Security Officer

Job Summary

To enhance enterprise engagement processes, the full-time Privacy and Security Enterprise Engagement Officer will partner with Health Plans or Shared Services to translate privacy, security, AI, and business continuity requirements into actionable controls while ensuring compliance and building relationships with key stakeholders in a remote capacity.

Key responsibilities

• Lead EPSRM engagement to ensure understanding and implementation of privacy, security, AI, and business continuity requirements
• Interpret regulatory and contractual requirements into operational controls and guide stakeholders on compliance expectations
• Manage compliance evidence, deliverables, and audit readiness, including responses to regulators and auditors

Required qualifications

• Bachelor's Degree in Information Security, Information Systems, Risk/Compliance, Business, Law, or related field; Master's Degree or Juris Doctor (JD) preferred
• 7+ years of experience in privacy/security, risk, or compliance within the managed care or health plan industry
• 5+ years of experience in identifying and communicating security or privacy control requirements in health plan operations
• Experience with State & Federal Privacy, Cybersecurity & AI laws applicable to healthcare payors
• CISSP or CISM certification required upon hire; additional certifications preferred