VP, Privacy Compliance

NRC Health • Lincoln, NE

5d • $175,000 - $250,000

About The Position

The VP, Privacy Compliance will lead NRC Health’s privacy program and ensure compliance with privacy laws and regulations. The role develops and implements privacy policies, procedures, and controls to safeguard sensitive data, promote privacy best practices, and maintain stakeholder trust. The position also represents NRC Health’s Information Security program through engagement with client security and compliance executives.

Requirements

• Bachelor’s degree required.
• Certification in information security, risk management, or privacy, such as CISSP, CIPP, or CISM.
• Experience leading responses to and investigations of security incidents and data breaches.
• Information security and data privacy experience in a healthcare covered entity or Business Associate organization.
• Comprehensive knowledge of healthcare industry standards related to HIPAA, HITRUST, and Sarbanes-Oxley, including experience with HITRUST implementation and certification.
• Proven experience developing and maintaining compliance programs, including risk assessments, policy creation, and auditing.
• Strong leadership skills and ability to work effectively with business managers, IT engineering, and IT operations staff.
• Previous experience in a public sector organization and a thorough understanding of its specific security and privacy requirements.

Nice To Haves

• Previous experience in a startup, venture-backed, or private equity organization.

Responsibilities

• Develop and implement comprehensive security policies and procedures that comply with regulatory requirements and align with industry best practices.
• Oversee the development and enforcement of privacy policies and procedures to protect personal and sensitive information in compliance with legal and regulatory frameworks.
• Liaise with stakeholders, including the Board, and regularly report on security and privacy matters so senior management is informed of risks and threats.
• Facilitate the incorporation of security throughout the organization through written policies, procedures, and training.
• Coordinate the development, review, and acceptance of system security plans with relevant parties.
• Implement and provide ongoing administrative support for the organization’s security and risk management programs.
• Respond to customer security questionnaires and RFP security assessments, and address client security-related matters.
• Coordinate audits and remediation of annual and quarterly security audit results related to IT security systems.
• Manage business continuance and disaster recovery (BC/DS).

Benefits

• My Time Off (MTO), a flexible paid time off program.
• Up to 12 weeks of paid parental and emergency leave.
• Comprehensive medical, dental, and vision coverage.
• Wellness program and financial coaching.
• Professional growth and career development opportunities.
• Potential performance-based variable compensation; eligibility and payouts vary by role and are tied to performance metrics.
• Generous compensation and benefits package.

What This Job Offers

• Job Type: Full-time
• Career Level: Executive