Privacy and Security Officer

Job Summary

Acting as a key partner and advisor, the full-time Privacy and Security Enterprise Engagement Officer will facilitate compliance with regulatory and contractual requirements while managing risks related to privacy, security, AI, and business continuity in a remote setting.

Key responsibilities

• Build strong stakeholder relationships to ensure clear understanding of privacy, security, and compliance expectations across various business units
• Conduct impact analyses on new requirements and facilitate cross-functional initiatives to maintain audit-ready compliance
• Translate complex regulatory requirements into actionable guidance for business and technology operations, ensuring risk-informed decision-making

Required qualifications

• Bachelor's Degree in Information Security, Information Systems, Risk/Compliance, Business Law, or a related field; Master's Degree or Juris Doctor preferred
• 5+ years of experience in privacy/security, risk, or compliance within the managed care or health plan industry
• 3+ years of experience in identifying and communicating security or privacy control requirements in health plan operations
• Experience leading complex, cross-functional projects involving multiple stakeholders
• Working knowledge of healthcare regulatory and security frameworks, including HIPAA/HITECH and NIST 800-53