RHTP Privacy and Security

State of North Carolina•Wake County, NC

2d•Hybrid

About The Position

The Privacy & Security Lead will support the NC DHHS Privacy and Security Office for Rural Health Transformation initiatives by developing, implementing, and strengthening privacy, cybersecurity, information governance, and risk-management practices across rural healthcare environments. This role will help ensure that health information and technology systems are protected while enabling secure, equitable, and innovative delivery of healthcare services.

Requirements

Bachelor's degree in computer science or a related IT field or related degree from an appropriately accredited institution and two years of progressive experience in IT Security or closely related area OR Associate degree in computer science or a related IT field or related degree from an appropriately accredited institution and three years of progressive experience in IT Security or closely related area OR An equivalent combination of education and experience

Nice To Haves

Demonstrated experience developing and implementing privacy and security policies, procedures, and controls for health information, government programs, or other highly regulated environments.
Experience conducting privacy and security risk assessments, including identifying risks, documenting findings, developing mitigation plans, and tracking remediation activities to completion.
Knowledge of healthcare privacy and security requirements, including HIPAA Privacy and Security Rules, HITECH, data-sharing requirements, and applicable state and federal confidentiality requirements.
Demonstrated ability to coordinate privacy and cybersecurity activities across multiple stakeholders, including state agencies, healthcare organizations, technology teams, vendors, and community/rural health partners.

Responsibilities

Develop and implement privacy and security strategies aligned with Rural Health Transformation priorities.
Assess cybersecurity, privacy, and technology risks across rural healthcare organizations, systems, and third-party partners.
Support compliance with applicable federal, state and NC DHHS privacy and security requirements, including HIPAA and related healthcare regulations.
Conduct security and privacy risk assessments and develop remediation plans for identified vulnerabilities and gaps.
Strengthen identity and access management, data protection, incident response, business continuity, and cybersecurity awareness practices.
Support secure implementation of digital health technologies, data-sharing capabilities, interoperability solutions, telehealth, and other technology-enabled rural health services.
Develop and monitor security metrics, risk indicators, and program performance measures.
Assist with incident response, breach preparedness, investigations, and required notifications.