Senior Healthcare Privacy and Security Specialist

Pay Range: $50.00hr - $55.00hr

Job Overview:

Our client is seeking privacy and security leadership and support for RHTP initiatives in alignment with organization requirements and applicable federal and state regulations. The position is responsible for supporting privacy and security governance, reviewing contracts and agreements-including Memoranda of Agreement (MOA), Memoranda of Understanding (MOU), Business Associate Agreements (BAA), and data-sharing agreements-identifying and mitigating privacy and security risks, and ensuring the appropriate protection of sensitive information. Additional responsibilities include supporting privacy and security assessments, third-party/vendor risk management, incident response, compliance and audit activities, data governance, policy and procedure development, privacy and security by design, data-flow review, vendor oversight, and change management. The role works collaboratively with leadership, program teams, legal, IT, compliance, and external partners to integrate privacy and security requirements throughout organizational initiatives.

Requirements:

• Experience working with state government health and human services organizations (2+ years required).
• Direct experience supporting Medicaid, healthcare, public health, or human services programs (5+ years required).
• Experience with RHTP Initiative 6 or similar large-scale healthcare transformation initiatives (1+ years required).
• Experience implementing privacy and security by design within technology and business initiatives (5+ years required).
• Familiarity with NIST Cybersecurity Framework, NIST Privacy Framework, NIST SP 800-53, or similar security/privacy frameworks (5+ years required).
• Experience performing risk assessments based on NIST 800-53 Rev 5 (7+ years required).
• Knowledge of federal requirements such as HIPAA Security Rule and Privacy Rule implementation (5+ years required).
• Experience reviewing RFP, RFQ, MOU, and MOA for privacy and security regulatory requirements for RHTP Initiative 6 (7+ years required).