Network Compliance & Risk Administrator

Independent Health Association; Buffalo (NY); Hybrid; USD 70,000 - 90,000; Full time

Job summary

Independent Health Association seeks a Network Compliance and Risk Administrator to oversee regulatory compliance for data privacy, cybersecurity, and data governance. You will align with leadership to ensure laws, regulations, and standards are met across technical systems and vendor relationships.

The role requires research, policy development, and collaboration with cross-functional teams to implement robust controls and oversight in a hybrid environment based in the Buffalo area.

Qualifications

• Bachelor's degree required; 4 years of experience may substitute.
• 4+ years in compliance, quality assurance, auditing, or data governance in a regulated environment; healthcare/pharmacy preferred.
• Experience with data security, encryption, DLP, data masking and privacy incl. CASB.
• Experience in cloud multi-tenant architectures including AWS.
• Certifications in information security/privacy (e.g., CISSP, GIAC, CISM, CIPT, CIPP/US) preferred.
• Knowledge of healthcare privacy programs (HITRUST, NIST, HIPAA/HITECH).
• Advanced proficiency with MS Office and learning new software quickly.
• Strong written and verbal communication; ability to draft policies and procedures.

Responsibilities

• Research state and federal data privacy statutes and update on changes.
• Maintain understanding of HIPAA/HITECH, privacy, cybersecurity, and AI governance requirements.
• Monitor emerging AI laws and advise leadership on compliance.
• Recommend and maintain cybersecurity certifications and requirements.
• Support contractual technical risk management and compliance processes.
• Coordinate with Information Risk Office and other departments on contracts with compliance terms.
• Assist RFPs and third-party security assessments; conduct vendor due diligence.
• Develop and improve Reliance Rx's technical compliance, privacy, and information security programs.

Skills

Regulatory research

Data governance

Policy drafting

Stakeholder management

Analytical thinking

Communication skills

Project management

HIPAA/HITECH

Regulatory compliance

Education

Bachelor's degree

Tools

AWS

CASB

DLP tools

Data discovery tools

Job description

FIND YOUR FUTURE

We're excited about the potential people bring to our organization. You can grow your career here while enjoying first-class perks, benefits and a culture that fosters growth, innovation and collaboration.

Overview

The Network Compliance and Risk Administrator shall be responsible for the overall execution, administration and monitoring of the compliance program as it relates to technical risk/cybersecurity, data governance and integrity, and data related law and regulation compliance to necessitate companywide adherence. The Network Compliance and Risk Administrator shall support various contract and regulatory activities and ensure the organization's technical systems, processes and data handling comply with laws, regulations, and industry standards. They will report to the Deputy Counsel-Regulatory Compliance Manager and under their direction will be the liaison between Reliance Rx business units, the parent company Information Risk Office, related departments and applicable outside vendors or regulatory bodies related to these compliance matters.

They will conduct regulatory research and analysis as it relates to proposed, pending or effective laws, rules, and regulations impactful to Reliance Rx cybersecurity, artificial intelligence, data governance and integrity, information privacy and security, and interoperability. They will assess and implement appropriate industry standard cybersecurity frameworks and related processes to ensure adequate hardening and protection of the Reliance Rx environment. The position will work closely with the Reliance Rx Leadership Team to ensure leadership is appraised of and in compliance with regulations governing Reliance Rx programs, as well as work closely with the pharmacy team and internal audit to ensure compliance with relevant regulations.

Qualifications

• Bachelor's degree required. An additional four (4) years of experience will be considered in lieu of degree.
• Four (4) years of experience in compliance, quality assurance, auditing, or data governance/process management within a regulated environment required. Healthcare or pharmacy-related experience preferred.
• Experience with data security, encryption, data masking, DLP technologies, data discovery and classification tools, and data privacy, including cloud access security broker (CASB) solutions.
• Experience in framework and architecture of cloud and multi-tenant environments, including AWS.
• Industry recognized certification within the domain of information security, information technology and privacy (e.g., CISSP, GIAC, CISM, CIPT, CIPP/US, etc.) preferred.
• Understanding of healthcare privacy program core elements as it relates to regulatory oversight, monitoring requirements and data security measures (HITRUST, NIST, ITIL, HIPAA, HITECH, etc.)
• Advanced experience with Microsoft Office applications and ability to learn new software applications.
• Excellent research skills and ability to exercise independent judgement to determine which changes in regulatory landscape should be presented in collateral and training.
• Excellent analytical skills, ability to analyze components of legislation and implement and draft necessary policies and procedures based upon regulatory requirements.
• Excellent composition and drafting skills, with emphasis on various compliance/regulatory documents and correspondence.
• Excellent communication skills, both verbal and written, and excellent interpersonal skills.
• Ability to effectively build and maintain relationships with both internal and external stakeholders.
• Proficiency in performing necessary research and preparing substantive work which requires knowledge of compliance concepts, with emphasis on HIPAA/HITECH.
• Possess initiative, creativity, project management and organizational abilities.
• Proven examples of displaying the Reliance values: Collaborative, Accessible, Results-Oriented, Empowering, Supportive.

Essential Accountabilities

• Research state and federal statutes and regulations concerning data privacy and handling such as, but not limited to state privacy laws, HIPAA/HITECH, DSCSA, PCI DSS; and monitor and track for any changes or updates.
• Research and maintain an understanding of the compliance obligations of our team, including, but not limited to: HIPAA/HITECH, data privacy and security, cybersecurity industry practices, cloud environment protection, and artificial intelligence, and shall provide recommendations to Reliance Rx leadership to communicate, as appropriate.
• Monitor emerging artificial intelligence laws, regulations, and industry guidance; assess organizational use of AI technologies for compliance with applicable regulatory, privacy, security, and governance requirements.
• Research and present appropriate cybersecurity certifications to Reliance Rx leadership, and where implemented initiate and maintain such certifications and the requirements.
• Support tracking and monitoring of contractual technical risk maintenance and compliance processes to ensure adherence with key contract terms and conditions.
• Facilitate coordination with parent Information Risk Office, and other relevant departments as needed during negotiation and review of Reliance Rx contracts containing technical compliance, HIPAA/HITECH, and related security terms.
• Support RFP requests and other contractually required cybersecurity assessments and questionnaires.
• Coordinate and support third-party security risk assessments, including vendor due diligence reviews, cybersecurity questionnaires, and remediation tracking.
• Support the development, implementation, communication, and continuous improvement of Reliance Rx's technical compliance, privacy, cybersecurity, and information security programs in collaboration with parent company Compliance and Information Risk teams.
• Manage technical compliance policies, procedures, standards, and related governance processes, including regulatory review, updates, documentation, and organizational communication.
• Develop and maintain cybersecurity risk management processes, including security assessments, incident response planning, risk tracking, vulnerability management, and remediation oversight.
• Monitor and report on technical compliance, cybersecurity, privacy, and security metrics, key risk indicators, regulatory requirements, and program effectiveness.
• Coordinate technical compliance training, security awareness initiatives, onboarding, annual education, attestations, and assessments for associates.
• Oversee the identification, investigation, escalation, reporting, and remediation of technical compliance, privacy, and security incidents, including corrective action plans.
• Collaborate with business, operational, and technical teams to establish and monitor data governance, data protection, access management, retention, and security controls.
• Coordinate cybersecurity testing and monitoring activities, including vulnerability assessments, penetration testing, phishing simulations, endpoint monitoring, and risk reviews, ensuring timely remediation and leadership reporting.
• Serve as the primary liaison between Reliance Rx and parent Compliance and Information Risk functions for technical compliance, privacy, security, audits, investigations, assessments, and regulatory inquiries.
• Facilitate compliance committee activities, risk exception reviews, security governance processes, and related reporting requirements.
• Act as the primary point of contact for associate technical compliance, privacy, and security inquiries, concerns, and reporting.
• Promote organizational awareness of technical compliance, privacy, and cybersecurity requirements through ongoing communication, education, and engagement initiatives.

This is a hybrid position with onsite attendance required at our Williamsville location.

Immigration or work visa sponsorship will not be provided for this position

Hiring Compensation Range: $70,000 - $90,000 annually

Compensation may vary based on factors including but not limited to skills, education, location and experience.

In addition to base compensation, associates may be eligible for a scorecard incentive, full range of benefits and generous paid time off. The base salary range is subject to change and may be modified in the future.

As an Equal Opportunity / Aff… Independent Health and its affiliates will not discriminate in its employment practices due to an applicant's race, color, creed, religion, sex (including pregnancy, childbirth or related medical conditions), sexual orientation, gender identity or expression, transgender status, age, national origin, marital status, citizenship and immigration status, physical and mental disability, criminal record, genetic information, predisposition or carrier status, status with respect to receiving public assistance, domestic violence victim status, a disabled, special, recently separated, active duty wartime, campaign badge, Armed Forces service medal veteran, or any other characteristics protected under applicable law. for additional EEO/AAP or Reasonable Accommodation information.