VP, Privacy Compliance

NRC Health • Lincoln, NE

2d

About The Position

NRC Health helps healthcare organizations understand the people they serve and turn that understanding into meaningful action. The VP, Privacy Compliance will lead NRC Health’s privacy program and ensure compliance with privacy laws and regulations. The role develops and implements privacy policies, procedures, and controls to safeguard sensitive data, promote privacy best practices, and maintain stakeholder trust. It also represents NRC Health’s Information Security program in engagements with client security and compliance executives.

The position works with stakeholders, including the Board and senior management, to communicate security and privacy risks and threats. It supports organization-wide security practices through policies, procedures, and training; coordinates security plans, audit remediation, and risk management programs; responds to customer security assessments; and manages business continuity and disaster recovery.

Requirements

• Bachelor’s degree required.
• Certification in information security, risk management, or privacy, such as CISSP, CIPP, or CISM.
• Experience leading the response to and investigation of security incidents and data breaches.
• Information security and data privacy experience in a healthcare covered entity or Business Associate organization.
• Comprehensive knowledge of healthcare industry standards related to HIPAA, HITRUST, and Sarbanes-Oxley, including experience with HITRUST implementation and certification.
• Proven experience developing and maintaining compliance programs, including risk assessments, policy creation, and auditing.
• Strong leadership skills and the ability to work effectively with business managers, IT engineering, and IT operations staff.
• Previous experience in a public sector organization and a thorough understanding of its specific security and privacy requirements.

Nice To Haves

• Previous experience in a startup, venture-backed, or private equity organization.

Responsibilities

• Develop and implement security policies and procedures that meet regulatory requirements and align with industry best practices.
• Oversee the development and enforcement of privacy policies and procedures to protect personal and sensitive information in accordance with legal and regulatory frameworks.
• Liaise with stakeholders, including the Board, and regularly report on security and privacy matters so senior management is informed of risks and threats.
• Promote organization-wide security through written policies, procedures, and training.
• Coordinate the development, review, and acceptance of system security plans with relevant parties.
• Implement and provide ongoing administrative support for the organization’s security and risk management programs.
• Respond to customer security questionnaires and RFP security assessments, and address client security matters.
• Coordinate audits and remediation of annual and quarterly security audit results related to IT security systems.
• Manage business continuity and disaster recovery.
• Represent NRC Health’s Information Security program in engagements with client security and compliance executives.

Benefits

• Flexible paid time off through the My Time Off (MTO) program.
• Up to 12 weeks of paid parental and emergency leave.
• Comprehensive medical, dental, and vision coverage.
• Wellness program and financial coaching.
• Professional growth and career development opportunities.
• Generous compensation and benefits package.
• Potential performance-based variable compensation; eligibility and payouts vary by role and performance metrics.

What This Job Offers

• Job Type: Full-time
• Career Level: Executive