Privacy and Security Officer

Job Summary

To support the health of communities, the full-time remote Privacy and Security Enterprise Engagement Officer will partner with Health Plans or Shared Services to translate privacy, security, AI, and business continuity requirements into actionable enterprise controls while ensuring compliance and fostering strong stakeholder relationships.

Key responsibilities

• Lead engagement with Health Plans or Shared Services to implement and monitor privacy, security, AI, and business continuity requirements
• Interpret regulatory and contractual requirements into operational controls and guide stakeholders on compliance expectations
• Validate compliance evidence and manage audit readiness, responding to regulators and internal/external auditors

Required qualifications

• Bachelor's Degree in Information Security, Information Systems, Risk/Compliance, Business, Law, or related field; equivalent experience as a paralegal accepted
• 7+ years of experience in privacy/security, risk, or compliance within the managed care or health plan industry
• 5+ years of experience in identifying and communicating security or privacy control requirements in health plan operations
• Experience with State & Federal Privacy, Cybersecurity & AI laws applicable to healthcare payors, such as HIPAA and CCPA
• CISSP or CISM certification required; additional certifications like CIP or CRISC preferred