Network Compliance & Risk Administrator

ih; United States; On-site; USD 120,000 - 160,000; Full time

Job summary

Reliance Rx is seeking a Network Compliance and Risk Administrator to oversee the compliance program for technical risk/cybersecurity, data governance, and data privacy. You will coordinate with leadership, pharmacy teams, and internal audit to ensure regulatory adherence and effective risk management.

The role requires strong research, drafting, and analytical capabilities, plus experience with HIPAA/HITECH and cloud environments.

Qualifications

• Bachelor's degree required. An additional four (4) years of experience will be considered in lieu of degree.
• Four (4) years of experience in compliance, quality assurance, auditing, or data governance/process management within a regulated environment required. Healthcare or pharmacy-related experience preferred.
• Experience with data security, encryption, data masking, DLP technologies, data discovery and classification tools, and data privacy, including cloud access security broker (CASB) solutions.
• Experience in framework and architecture of cloud and multi-tenant environments, including AWS.
• Industry recognized certification within the domain of information security, information technology and privacy (e.g., CISSP, GIAC, CISM, CIPT, CIPP/US, etc.) preferred.
• Understanding of healthcare privacy program core elements as it relates to regulatory oversight, monitoring requirements and data security measures (HITRUST, NIST, ITIL, HIPAA, HITECH, etc.)
• Advanced experience with Microsoft Office applications and ability to learn new software applications.
• Excellent research skills and ability to exercise independent judgement to determine which changes in regulatory landscape should be presented in collateral and training.
• Excellent analytical skills, ability to analyze components of legislation and implement and draft necessary policies and procedures based upon regulatory requirements.
• Excellent composition and drafting skills, with emphasis on various compliance/regulatory documents and correspondence.
• Excellent communication skills, both verbal and written, and excellent interpersonal skills.
• Ability to effectively build and maintain relationships with both internal and external stakeholders.
• Proficiency in performing necessary research and preparing substantive work which requires knowledge of compliance concepts, with emphasis on HIPAA/HITECH.
• Possess initiative, creativity, project management and organizational abilities.
• Proven examples of displaying the Reliance values: Collaborative, Accessible, Results-Oriented, Empowering, Supportive.

Responsibilities

• Research state and federal statutes and regulations concerning data privacy and handling such as, but not limited to state privacy laws, HIPAA/HITECH, DSCSA, PCI DSS; and monitor and track for any changes or updates.
• Research and maintain an understanding of the compliance obligations of our team, including, but not limited to: HIPAA/HITECH, data privacy and security, cybersecurity industry practices, cloud environment protection, and artificial intelligence, and shall provide recommendations to Reliance Rx leadership to communicate, as appropriate.
• Monitor emerging artificial intelligence laws, regulations, and industry guidance; assess organizational use of AI technologies for compliance with applicable regulatory, privacy, security, and governance requirements.
• Research and present appropriate cybersecurity certifications to Reliance Rx leadership, and where implemented initiate and maintain such certifications and the requirements.
• Support tracking and monitoring of contractual technical risk maintenance and compliance processes.

Skills

Regulatory research

Data privacy

Data governance

Cybersecurity concepts

Policy drafting

Communication skills

Independent judgement

Project management

Stakeholder management

HIPAA/HITECH knowledge

Education

Bachelor's degree required

4 years experience in regulated environment

Tools

AWS

CASB

DLP tools

Data discovery tools

Encryption tools

Job description

FIND YOUR FUTURE

We're excited about the potential people bring to our organization. You can grow your career here while enjoying first-class perks, benefits and a culture that fosters growth, innovation and collaboration.

Overview

The Network Compliance and Risk Administrator shall be responsible for the overall execution, administration and monitoring of the compliance program as it relates to technical risk/cybersecurity, data governance and integrity, and data related law and regulation compliance to necessitate companywide adherence.

The Network Compliance and Risk Administrator shall support various contract and regulatory activities and ensure the organization's technical systems, processes and data handling comply with laws, regulations, and industry standards. They will report to the Deputy Counsel-Regulatory Compliance Manager and under their direction will be the liaison between Reliance Rx business units, the parent company Information Risk Office, related departments and applicable outside vendors or regulatory bodies related to these compliance matters.

They will conduct regulatory research and analysis as it relates to proposed, pending or effective laws, rules, and regulations impactful to Reliance Rx cybersecurity, artificial intelligence, data governance and integrity, information privacy and security, and interoperability. They will assess and implement appropriate industry standard cybersecurity frameworks and related processes to ensure adequate hardening and protection of the Reliance Rx environment.

The position will work closely with the Reliance Rx Leadership Team to ensure leadership is appraised of and in compliance with regulations governing Reliance Rx programs, as well as work closely with the pharmacy team and internal audit to ensure compliance with relevant regulations.

Qualifications

• Bachelor's degree required. An additional four (4) years of experience will be considered in lieu of degree.
• Four (4) years of experience in compliance, quality assurance, auditing, or data governance/process management within a regulated environment required. Healthcare or pharmacy-related experience preferred.
• Experience with data security, encryption, data masking, DLP technologies, data discovery and classification tools, and data privacy, including cloud access security broker (CASB) solutions.
• Experience in framework and architecture of cloud and multi-tenant environments, including AWS.
• Industry recognized certification within the domain of information security, information technology and privacy (e.g., CISSP, GIAC, CISM, CIPT, CIPP/US, etc.) preferred.
• Understanding of healthcare privacy program core elements as it relates to regulatory oversight, monitoring requirements and data security measures (HITRUST, NIST, ITIL, HIPAA, HITECH, etc.)
• Advanced experience with Microsoft Office applications and ability to learn new software applications.
• Excellent research skills and ability to exercise independent judgement to determine which changes in regulatory landscape should be presented in collateral and training.
• Excellent analytical skills, ability to analyze components of legislation and implement and draft necessary policies and procedures based upon regulatory requirements.
• Excellent composition and drafting skills, with emphasis on various compliance/regulatory documents and correspondence.
• Excellent communication skills, both verbal and written, and excellent interpersonal skills.
• Ability to effectively build and maintain relationships with both internal and external stakeholders.
• Proficiency in performing necessary research and preparing substantive work which requires knowledge of compliance concepts, with emphasis on HIPAA/HITECH.
• Possess initiative, creativity, project management and organizational abilities.
• Proven examples of displaying the Reliance values: Collaborative, Accessible, Results-Oriented, Empowering, Supportive.

Essential Accountabilities

• Research state and federal statutes and regulations concerning data privacy and handling such as, but not limited to state privacy laws, HIPAA/HITECH, DSCSA, PCI DSS; and monitor and track for any changes or updates.
• Research and maintain an understanding of the compliance obligations of our team, including, but not limited to: HIPAA/HITECH, data privacy and security, cybersecurity industry practices, cloud environment protection, and artificial intelligence, and shall provide recommendations to Reliance Rx leadership to communicate, as appropriate.
• Monitor emerging artificial intelligence laws, regulations, and industry guidance; assess organizational use of AI technologies for compliance with applicable regulatory, privacy, security, and governance requirements.
• Research and present appropriate cybersecurity certifications to Reliance Rx leadership, and where implemented initiate and maintain such certifications and the requirements.
• Support tracking and monitoring of contractual technical risk maintenance and compliance proce