Cyber Risk & Data Compliance Admin — Hybrid

Independent Health Association; Buffalo (NY); Hybrid; USD 70,000 - 90,000; Full time

Job summary

Independent Health Association seeks a Network Compliance and Risk Administrator to oversee regulatory compliance for data privacy, cybersecurity, and data governance. You will align with leadership to ensure laws, regulations, and standards are met across technical systems and vendor relationships.

The role requires research, policy development, and collaboration with cross-functional teams to implement robust controls and oversight in a hybrid environment based in the Buffalo area.

Qualifications

• Bachelor's degree required; 4 years of experience may substitute.
• 4+ years in compliance, quality assurance, auditing, or data governance in a regulated environment; healthcare/pharmacy preferred.
• Experience with data security, encryption, DLP, data masking and privacy incl. CASB.
• Experience in cloud multi-tenant architectures including AWS.
• Certifications in information security/privacy (e.g., CISSP, GIAC, CISM, CIPT, CIPP/US) preferred.
• Knowledge of healthcare privacy programs (HITRUST, NIST, HIPAA/HITECH).
• Advanced proficiency with MS Office and learning new software quickly.
• Strong written and verbal communication; ability to draft policies and procedures.

Responsibilities

• Research state and federal data privacy statutes and update on changes.
• Maintain understanding of HIPAA/HITECH, privacy, cybersecurity, and AI governance requirements.
• Monitor emerging AI laws and advise leadership on compliance.
• Recommend and maintain cybersecurity certifications and requirements.
• Support contractual technical risk management and compliance processes.
• Coordinate with Information Risk Office and other departments on contracts with compliance terms.
• Assist RFPs and third-party security assessments; conduct vendor due diligence.
• Develop and improve Reliance Rx's technical compliance, privacy, and information security programs.

Skills

Regulatory research

Data governance

Policy drafting

Stakeholder management

Analytical thinking

Communication skills

Project management

HIPAA/HITECH

Regulatory compliance

Education

Bachelor's degree

Tools

AWS

CASB

DLP tools

Data discovery tools

Job description

Independent Health Association seeks a Network Compliance and Risk Administrator to oversee regulatory compliance for data privacy, cybersecurity, and data governance. You will align with leadership to ensure laws, regulations, and standards are met across technical systems and vendor relationships.

The role requires research, policy development, and collaboration with cross-functional teams to implement robust controls and oversight in a hybrid environment based in the Buffalo area.