Privacy & Security Enterprise Engagement Officer

This is a fully remote position, open to applicants in California, +3 more states.

📋 Description

• Collaborates with Health Plans or Shared Services to convert privacy, security, artificial intelligence (AI), business continuity, and related mandates from client contracts, laws, and regulations into effective enterprise controls.

• Develops trustworthy relationships with Health Plan leadership and key stakeholders to ensure contract assurance, readiness reviews, Request for Proposal (RFP) support, timely deliverable fulfillment, compliance reporting, and continuous improvement.

• Fosters early engagement with Enterprise Privacy, Security, and Risk Management (EPSRM) to enhance visibility and influence throughout the organization.

• Leads EPSRM interactions with Health Plans or Shared Services to guarantee that privacy, security, AI, and business continuity requirements are well understood, executed, and monitored.

• Analyzes and translates regulatory, contractual, and legal mandates into operational controls while guiding stakeholders on compliance expectations.

• Validates and manages compliance evidence, deliverables, and audit readiness, including responses to regulators, clients, and both internal and external auditors.

• Cultivates and sustains strong relationships with leadership, operational teams, and regulators to eliminate barriers, address issues, and promote consistent compliance practices.

• Monitors regulatory, legislative, and contract modifications, evaluates organizational impact, and communicates necessary actions while supporting scalable control updates.

• Ensures the accuracy and completeness of privacy, security, AI, and business continuity documentation, including plans, attestations, questionnaires, and related submissions.

• Enhances enterprise engagement processes by implementing standardized procedures, governance practices, templates, and continuous improvement initiatives.

• Aids in new market introductions, RFP responses, contract renewals, and business growth by offering specialized EPSRM subject-matter expertise.

• Identifies risks and control deficiencies, proposes mitigation strategies, and contributes to enhanced compliance maturity across the enterprise.

⛳️ Requirements

• Bachelor's Degree in Information Security, Information Systems, Risk/Compliance, Business, Law, or related compliance capabilities, or equivalent experience as a paralegal is required.

• Master's Degree in a related field is preferred.

• Juris Doctor (JD) is preferred.

• A minimum of 7 years of experience in privacy/security, risk, or compliance within the managed care, payer/health plan sector is required.

• At least 5 years of experience in identifying, analyzing, and communicating security or privacy control requirements within the context of health plan operations, processes, and systems is required.

• Proven experience in assessing and interpreting contract and regulatory requirements, translating them into control-based operational capabilities, and ensuring delivery across multiple stakeholders is required.

• Experience in interpreting, implementing, and ensuring compliance with State & Federal Privacy, Cybersecurity & AI laws & regulations applicable to healthcare payors and related business entities (i.e., HIPAA/HITECH, CCPA/CPRA, CPA, CTDPA, CAIA, VPA, COPPA, TCPA, etc.) is required.

• CISSP / CISM Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM) is required upon hire.

• Certified Information Privacy Professional (CIP), Artificial Intelligence Governance Professional (AIGP), Certified Risk and Information Systems Control (CRISC), or Certified Information Security Analyst (CISA) or equivalent is preferred.

🏝️ Benefits

• Competitive pay

• Health insurance

• 401K plans

• Stock purchase plans

• Tuition reimbursement

• Paid time off plus holidays

• Flexible work approach with remote, hybrid, field, or office work schedules