Head of Privacy & Compliance Strategy

NRC Health; Lincoln (NE); On-site; USD 175,000 - 250,000; Full time

Benefits offered by this job

Medical/Dental/Vision coverage

Wellness program

Professional growth & career dev

Parental & emergency leave up to 12 w

Job summary

NRC Health is seeking a VP of Privacy Compliance to lead our privacy program, develop and enforce policies, and ensure regulatory alignment across the organization. You will represent the Information Security program in client engagements and drive risk management with senior stakeholders.

This role requires healthcare privacy expertise, strong leadership, and the ability to translate complex regulations into practical controls and training.

Qualifications

• Bachelor's degree required.
• Certification in information security, risk management, or privacy (e.g. CISSP, CIPP, CISM).
• Experience in leading the response to and investigation of security incidents and data breaches.
• Information security and data privacy experience in a healthcare covered entity or Business Associate organization.
• Comprehensive knowledge of Healthcare industry standards related to HIPAA, HITRUST, Sarbanes-Oxley, including HITRUST implementation and certification.
• Proven experience in developing and maintaining compliance programs, including risk assessments, policy creation, and auditing.
• Strong leadership skills and the ability to work effectively with business managers, IT engineering, and IT operations staff.
• Previous experience in a public sector organization with a thorough understanding of the specific security and privacy requirements.
• Previous experience in a startup/venture backed/private equity organization a plus.

Responsibilities

• Develop and implement comprehensive security policies and procedures that comply with regulatory requirements and align with industry best practices.
• Oversee the development and enforcement of privacy policies and procedures to ensure the protection of personal and sensitive information in compliance with legal and regulatory frameworks.
• Liaise with stakeholders, including the Board, to report on security and privacy matters regularly, ensuring that senior management is informed of risks and threats.
• Facilitate the incorporation of security throughout the organization using written policies, procedures, and training
• Coordinate the development, review and acceptance of system security plans with relevant parties
• Implement and provide ongoing administrative support for the organizations’ security and risk management programs
• Accountable for responding to customer security questionnaires, RFP security assessments and addressing client security related matters.
• Coordinate the audit and remediation of annual and quarterly security audit results as related to IT security systems
• Manage business continuance/disaster recovery (BC/DS)

Skills

Leadership

Security awareness

Privacy mindset

Education

Bachelor's degree

CISSP/CIPP/CISM certification

Tools

HIPAA knowledge

HITRUST familiarity

Security risk tools

Job description

NRC Health is seeking a VP of Privacy Compliance to lead our privacy program, develop and enforce policies, and ensure regulatory alignment across the organization. You will represent the Information Security program in client engagements and drive risk management with senior stakeholders.

This role requires healthcare privacy expertise, strong leadership, and the ability to translate complex regulations into practical controls and training.