Location: Raleigh, NC

Key Responsibilities & Core Skills

• Policy & Manual Creation: Research, draft, and update enterprise security and privacy policies, guidance documents, and manuals.
• Regulatory Compliance: Align documentation with key frameworks including HIPAA, NIST, and CMS standards.
• Gap & Risk Analysis: Review existing policies to identify gaps, redundancies, inconsistencies, or regulatory misalignment.
• SME Collaboration: Partner closely with cybersecurity teams, legal counsel, compliance officers, and executive leadership to translate technical/regulatory concepts into plain language.
• Document Governance: Maintain version control, document tracking, and standardized formatting across all policy materials.
• Policy Communication: Develop summaries, presentations, and training materials to support policy rollouts.

Minimum Qualifications

• 5+ years of experience writing privacy, security, and compliance policies.
• 5+ years working with HIPAA, NIST, and CMS regulatory standards.
• 5+ years of experience translating complex technical and legal requirements into clear operational documentation.
• Healthcare industry background is required.