Senior Healthcare Privacy and Security Specialist

Cynet Systems • Raleigh, NC

1d

About The Position

The Senior Healthcare Privacy and Security Specialist provides privacy and security leadership and support for RHTP initiatives in alignment with organizational requirements and applicable federal and state regulations. The position supports privacy and security governance; reviews contracts and agreements, including Memoranda of Agreement (MOA), Memoranda of Understanding (MOU), Business Associate Agreements (BAA), and data-sharing agreements; identifies and mitigates privacy and security risks; and helps ensure the appropriate protection of sensitive information.

The role also supports privacy and security assessments, third-party and vendor risk management, incident response, compliance and audit activities, data governance, policy and procedure development, privacy and security by design, data-flow reviews, vendor oversight, and change management. It collaborates with leadership, program teams, legal, IT, compliance, and external partners to integrate privacy and security requirements throughout organizational initiatives.

Requirements

• At least 2 years of experience working with state government health and human services organizations.
• At least 5 years of direct experience supporting Medicaid, healthcare, public health, or human services programs.
• At least 1 year of experience with RHTP Initiative 6 or similar large-scale healthcare transformation initiatives.
• At least 5 years of experience implementing privacy and security by design within technology and business initiatives.
• At least 5 years of familiarity with the NIST Cybersecurity Framework, NIST Privacy Framework, NIST SP 800-53, or similar security/privacy frameworks.
• At least 7 years of experience performing risk assessments based on NIST 800-53 Rev 5.
• At least 5 years of knowledge of federal requirements such as implementation of the HIPAA Security Rule and Privacy Rule.
• At least 7 years of experience reviewing RFPs, RFQs, MOUs, and MOAs for privacy and security regulatory requirements for RHTP Initiative 6.

Responsibilities

• Support privacy and security governance for RHTP initiatives in alignment with organizational requirements and applicable federal and state regulations.
• Review contracts and agreements, including MOAs, MOUs, BAAs, and data-sharing agreements.
• Identify and mitigate privacy and security risks and help ensure sensitive information is appropriately protected.
• Support privacy and security assessments and third-party/vendor risk management.
• Support incident response, compliance and audit activities, and data governance.
• Develop and support privacy and security policies and procedures.
• Integrate privacy and security by design into organizational initiatives and review data flows.
• Provide vendor oversight and support change management.
• Collaborate with leadership, program teams, legal, IT, compliance, and external partners to integrate privacy and security requirements throughout initiatives.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed