NC DHHS - Privacy and Security Office (PSO) requiring services to access privacy, security, regulatory requirements, guidance, best practices, that help protect confidential information for RHTP
NC DHHS - Privacy and Security Office (PSO) requiring services to provide privacy and security leadership and support for RHTP initiatives in alignment with NC DHHS Privacy and Security Office (PSO) requirements and applicable federal and state regulations. The position is responsible for supporting privacy and security governance, reviewing contracts and agreements including Memoranda of Agreement (MOA), Memoranda of Understanding (MOU), Business Associate Agreements (BAA), and data-sharing agreements identifying and mitigating privacy and security risks, and ensuring the appropriate protection of sensitive information.
The position also supports privacy and security assessments, third-party/vendor risk management, incident response, compliance and audit activities, data governance, policy and procedure development, and privacy, privacy and security by design, data-flow review, vendor oversight, incident response, and change management and security awareness. The role works collaboratively with RHTP leadership, program teams, legal, IT, compliance, and external partners to integrate privacy and security requirements throughout RHTP initiatives and maintain a strong culture of privacy, security, and regulatory compliance.
Required/Desired Skills
| Skill | Required /Desired | Amount | of Experience |
|---|
| Experience working with NC DHHS or other state government health and human services organizations. | Required | 2 | Years |
| Direct experience supporting Medicaid, healthcare, public health, or human services programs. | Required | 5 | Years |
| Experience with RHTP Initiative 6 or similar large-scale healthcare transformation initiatives. | Required | 1 | Years |
| Experience implementing privacy and security by design within technology and business initiatives. | Required | 5 | Years |
| Familiarity with NIST Cybersecurity Framework, NIST Privacy Framework, NIST SP 800-53, or similar security/privacy frameworks. | Required | 5 | Years |
| Experience Performing risk assessments based on NIST 800-53 Rev 5.. | Required | 7 | Years |
| Knowledge of Federal Requirements such as HIPAA Security Rule and Privacy Rule implementation | Required | 5 | Years |
| Experience in reviewing RFP, RFQ, MOU and MOA for privacy and security regulatory requirements for RHTP Initiative 6 | Required | 7 | Years |
Questions
| No. | Question |
|---|
| Question1 | Absences greater than two weeks MUST be approved by CAI management in advance, and contact information must be provided to CAI so that the resource can be reached during his or her absence. The Client has the right to dismiss the resource if he or she does not return to work by the agreed upon date. Do you accept this requirement? |
| Question2 | All work must be completed on site. Do you accept this requirement? |
| Question3 | Please list candidate's email address HERE that will be used when submitting E-RTR. |
| Question4 | Please indicate how soon this candidate is available to start work. Vendors are encouraged to submit candidates that are available for the duration of the assignment. |
| Question5 | Vendor must disclose to the agency if the candidate will be subcontracted at the time of submission. Do you accept this requirement? |
| Question6 | Vendor must notify the agency if any portion of the requirements listed in this task order are to be outsourced to other countries. Do you accept this requirement? |
| Question7 | Please confirm you have thoroughly validated, and attest to the accuracy of, the credentials listed throughout this candidate s VectorVMS profile and resume pursuant to Section 5.2.5 of ITS-009440. Do you confirm? |
| Question8 | Candidates submitted over -5/hr will not be considered. Do you accept this requirement? |