Cyber Risk & Data Compliance Leader

Independent Health; Village of Williamsville (NY); Hybrid; USD 70,000 - 90,000; Full time

Benefits offered by this job

Scorecard incentive

Generous paid time off

Job summary

Independent Health is seeking a Network Compliance and Risk Administrator to oversee regulatory compliance related to cybersecurity, data governance and privacy. The role includes collaborating with the Information Risk Office, stakeholders, and external vendors to ensure adherence to HIPAA/HITECH and other standards.

The position emphasizes research, policy development, and training, with a hybrid work arrangement including onsite Williamsville participation.

Qualifications

• Bachelor’s degree required; four (4) years of experience in compliance, QA, auditing, or data governance within a regulated environment.
• Experience with data security, encryption, data masking, DLP, and data privacy tools including CASB is preferred.
• Knowledge of HIPAA/HITECH, HITRUST, NIST, ITIL and related privacy/security standards.
• Ability to interpret regulatory changes and translate them into policies and procedures.
• Excellent written and verbal communication; ability to manage cross‑functional relationships.

Responsibilities

• Research state and federal data privacy/regulatory requirements and monitor updates.
• Oversee technical compliance, privacy, cybersecurity programs in collaboration with Information Risk teams.
• Coordinate third‑party security assessments, vendor due diligence, and remediation tracking.
• Develop and maintain governance processes, policies, and training for associates.
• Lead security and privacy incident response, investigations and reporting.

Skills

Regulatory compliance

Data governance

Cybersecurity

HIPAA/HITECH knowledge

Communication skills

Project management

Education

Bachelor’s degree

Tools

AWS

CASB solutions

Data discovery tools

Job description

Independent Health is seeking a Network Compliance and Risk Administrator to oversee regulatory compliance related to cybersecurity, data governance and privacy. The role includes collaborating with the Information Risk Office, stakeholders, and external vendors to ensure adherence to HIPAA/HITECH and other standards.

The position emphasizes research, policy development, and training, with a hybrid work arrangement including onsite Williamsville participation.