Solutions and Performance Governance Partner

Highmark Health • Pittsburgh, PA

38d • Remote

About The Position

This role is a key expert in ensuring the organization's adherence to rules and standards, primarily by crafting accurate and timely responses to complex requests from external parties about security, privacy, and compliance. A central responsibility involves building and managing a customer-facing platform that transparently showcases the organization's commitment to data protection and regulatory requirements. This individual collaborates across various internal departments, acting as a pivotal partner to coordinate information and provide specialized guidance, ultimately delivering high-quality, compliant external communications and maintaining essential response content.

Requirements

• 5 years of experience in progressive experience in compliance, risk management, or client-facing response management (RFI/RFP).
• 3 years of experience in project management and/or business process design, overseeing cross-functional initiatives.
• Stakeholder & Cross-functional Management: Expert in coordinating and collaborating with diverse internal and external stakeholders (e.g., Sales, Privacy, Compliance, Legal, Regulatory, clients, consultants) to manage relationships and drive consensus.
• Regulatory & Compliance Expertise: Deep understanding and application of regulatory frameworks (NIST, HITRUST, PCI, HIPAA, SOC, MAR, CMS, JCAHO), including expert knowledge of healthcare business processes, risk/control frameworks, and assessment methodologies, specifically for RFIs, RFPs, and security questionnaires.
• Trust Center Governance: Strategic development, ownership, and continuous improvement of client-facing trust portals as central repositories for compliance and security information.
• Process Governance & Optimization: Establishes, maintains, and ensures adherence to desk-level procedures and operational standards, driving process efficiency and continuous improvement.
• Response Management: Expertly manages and coordinates responses to complex RFIs, RFPs, and security questionnaires, crafting professional and accurate content, executive summaries, and messaging. Serves as a principal content manager for database responses, ensuring quality and consistency.
• Project & Program Management: Manages complex projects from planning through execution, including strategic planning facilitation, resource allocation, and oversight of specialist teams, ensuring timely and custom deliverables.
• Leadership & Team Oversight: Provides day-to-day leadership, guidance, and mentorship to junior specialists, fostering team development and ensuring high-quality project outcomes.
• Analytical & Strategic Decision-Making: High capacity to interpret complex information, apply judgment, and make effective, strategic decisions for risk and compliance initiatives.
• Communication & Presentation: Exceptional written and verbal communication skills, including proposal writing, for diverse audiences (senior management, board, peer, clients).
• Problem Solving & Issue Resolution: Proactively identifies, manages, and resolves complex issues and outstanding items efficiently.
• Technology Proficiency: Proficient in Microsoft Office Suite and specialized RFP Automation Software.
• Bachelor’s degree in Business Administration, Information Technology, Risk Management, Compliance, Pre-Law, Marketing, Communications or related field or relevant experience and/or education as determined by the company in lieu of bachelor's degree.

Nice To Haves

• Experience in the healthcare (payer or provider) industry.
• Experience in developing, implementing, or managing a client-facing Trust Center or similar compliance portal.
• Experience with team leadership, coaching, or mentoring.
• Master's degree in Business Administration, Information Technology, Risk Management, Compliance, Pre-Law, Marketing, Communications or related field.
• Certified Public Accountant (CPA)
• Certified Information Systems Auditor (CISA)
• Certified Information Systems Security Professional (CISSP)
• Project Management Professional (PMP)

Responsibilities

• Trust Center Governance: Strategically develops, owns, and improves of client-facing trust portals as central repositories for compliance and security information.
• Response Management, Communication & Technology: Expertly manages and coordinates responses to complex RFIs, RFPs, and security questionnaires, crafting professional and accurate content and messaging. Possesses exceptional written and verbal communication skills for diverse audiences and is proficient in Microsoft Office Suite and specialized RFP Automation Software.
• Process Governance & Optimization: Establishes, maintains, and ensures adherence to operational standards, driving process efficiency and continuous improvement.
• Strategic Decision-Making & Problem Solving: Interprets complex information, applies judgment, and makes effective strategic decisions for risk and compliance initiatives, proactively resolving complex issues.
• Project & Program Management: Manages complex projects from planning through execution, including strategic planning, resource allocation, and oversight of specialist teams.
• Other duties as assigned or requested.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level