Healthcare Privacy and Security Compliance Consultant – Medicaid/RHTP - Hybrid

***Interview Type: Webcam Interview*** Very long term project; initial PO for 1 year, expect to go for 4+ years ***Hybrid***

Job Description

Our client requiring services to provide privacy and security leadership and support for RHTP initiatives in alignment with client requirements and applicable federal and state regulations.

The position is responsible for supporting the following key functions:

• Privacy and security governance
• Reviewing contracts and agreements—including Memoranda of Agreement (MOA), Memoranda of Understanding (MOU), Business Associate Agreements (BAA), and data-sharing agreements
• Identifying and mitigating privacy and security risks
• Ensuring the appropriate protection of sensitive information
• Supporting privacy and security assessments
• Third-party and vendor risk management
• Incident response
• Compliance and audit activities
• Data governance
• Policy and procedure development
• Privacy and security by design
• Data-flow review
• Vendor oversight
• Change management and security awareness

The role works collaboratively with RHTP leadership, program teams, legal, IT, compliance, and external partners to integrate privacy and security requirements throughout RHTP initiatives and maintain a strong culture of privacy, security, and regulatory compliance.

Skills/Requirements

• Experience working with NC DHHS or other state government health and human services organizations. Required 2 Years
• Direct experience supporting Medicaid, healthcare, public health, or human services programs. Required 5 Years
• Experience with RHTP Initiative 6 or similar large-scale healthcare transformation initiatives. Required 1 Years
• Experience implementing privacy and security by design within technology and business initiatives. Required 5 Years
• Familiarity with NIST Cybersecurity Framework, NIST Privacy Framework, NIST SP 800-53, or similar security/privacy frameworks. Required 5 Years
• Experience Performing risk assessments based on NIST 800-53 Rev 5.. Required 7 Years
• Knowledge of Federal Requirements such as HIPAA Security Rule and Privacy Rule implementation Required 5 Years
• Experience in reviewing RFP, RFQ, MOU and MOA for privacy and security regulatory requirements for RHTP Initiative 6 Required 7 Years