Rural Health Transformation Privacy & Security

ExecRecruitment•Raleigh, NC

About The Position

The role provides privacy and security leadership and support for Rural Health Transformation Program (RHTP) initiatives, aligned with NC DHHS Privacy and Security Office (PSO) requirements and applicable federal and state regulations. It supports privacy and security governance; reviews contracts and agreements, including MOAs, MOUs, BAAs, and data-sharing agreements; identifies and mitigates privacy and security risks; and helps ensure sensitive information is appropriately protected. The position also supports privacy and security assessments, third-party and vendor risk management, incident response, compliance and audit activities, data governance, policy and procedure development, privacy and security by design, data-flow reviews, vendor oversight, change management, and security awareness. It collaborates with RHTP leadership, program teams, legal, IT, compliance, and external partners to integrate privacy and security requirements throughout RHTP initiatives and maintain a strong culture of privacy, security, and regulatory compliance.

Requirements

At least 2 years of experience working with NC DHHS or other state government health and human services organizations.
At least 5 years of direct experience supporting Medicaid, healthcare, public health, or human services programs.
At least 1 year of experience with RHTP Initiative 6 or similar large-scale healthcare transformation initiatives.
At least 5 years of experience implementing privacy and security by design within technology and business initiatives.
At least 5 years of familiarity with the NIST Cybersecurity Framework, NIST Privacy Framework, NIST SP 800-53, or similar security/privacy frameworks.
At least 7 years of experience performing risk assessments based on NIST 800-53 Rev. 5.
At least 5 years of knowledge of federal requirements such as implementation of the HIPAA Security Rule and Privacy Rule.
At least 7 years of experience reviewing RFPs, RFQs, MOUs, and MOAs for privacy and security regulatory requirements for RHTP Initiative 6.

Responsibilities

Provide privacy and security leadership and support for RHTP initiatives in alignment with NC DHHS PSO requirements and applicable federal and state regulations.
Support privacy and security governance.
Review contracts and agreements, including MOAs, MOUs, BAAs, and data-sharing agreements, for privacy and security requirements.
Identify and mitigate privacy and security risks and help ensure sensitive information is appropriately protected.
Support privacy and security assessments, third-party and vendor risk management, incident response, compliance and audit activities, and data governance.
Contribute to policy and procedure development, privacy and security by design, data-flow reviews, vendor oversight, change management, and security awareness.
Collaborate with RHTP leadership, program teams, legal, IT, compliance, and external partners to integrate privacy and security requirements throughout RHTP initiatives.
Help maintain a strong culture of privacy, security, and regulatory compliance.