Network Compliance & Risk Administrator

Independent Health; United States; Hybrid; USD 70,000 - 90,000; Full time

Job summary

Independent Health is seeking a Network Compliance and Risk Administrator to oversee regulatory research, data governance and cybersecurity compliance across Reliance Rx services. You will partner with Information Risk and various stakeholders to ensure privacy, security policies and regulatory alignment.

Hybrid role based in Williamsville requiring onsite coordination; you will drive risk assessments, vendor due diligence, and policy development, while promoting a culture of compliance and

Qualifications

• Bachelor’s degree required; four years experience may substitute.
• Four years in compliance, quality assurance, auditing, or data governance within regulated env.
• Healthcare or pharmacy experience preferred; familiarity with HIPAA/HITECH and privacy.

Responsibilities

• Research state and federal statutes concerning data privacy and HIPAA/HITECH.
• Monitor compliance obligations across HIPAA, data privacy, cybersecurity, cloud protection.
• Lead third-party security risk assessments and vendor due diligence.
• Develop and maintain policies, procedures and governance processes.
• Coordinate with Information Risk Office and other departments on regulatory reviews.

Skills

Regulatory research

Cybersecurity frameworks

Data governance

HIPAA/HITECH

Communication skills

Analytical skills

Project management

Interpersonal skills

Education

Bachelor’s degree

Tools

AWS

CASB

Data discovery tools

Encryption tools

Job description

FIND YOUR FUTURE We're excited about the potential people bring to our organization. You can grow your career here while enjoying first-class perks, benefits and a culture that fosters growth, innovation and collaboration.

Overview

The Network Compliance and Risk Administrator shall be responsible for the overall execution, administration and monitoring of the compliance program as it relates to technical risk/cybersecurity, data governance and integrity, and data related law and regulation compliance to necessitate companywide adherence. The Network Compliance and Risk Administrator shall support various contract and regulatory activities and ensure the organization’s technical systems, processes and data handling comply with laws, regulations, and industry standards. They will report to the Deputy Counsel‑Regulatory Compliance Manager and under their direction will be the liaison between Reliance Rx business units, the parent company Information Risk Office, related departments and applicable outside vendors or regulatory bodies related to these compliance matters. They will conduct regulatory research and analysis as it relates to proposed, pending or effective laws, rules, and regulations impactful to Reliance Rx cybersecurity, artificial intelligence, data governance and integrity, information privacy and security, and interoperability.

They will assess and implement appropriate industry standard cybersecurity frameworks and related processes to ensure adequate hardening and protection of the Reliance Rx environment. The position will work closely with the Reliance Rx Leadership Team to ensure leadership is appraised of and in compliance with regulations governing Reliance Rx programs, as well as work closely with the pharmacy team and internal audit to ensure compliance with relevant regulations.

Qualifications

Bachelor’s degree required. An additional four (4) years of experience will be considered in lieu of degree. Four (4) years of experience in compliance, quality assurance, auditing, or data governance/process management within a regulated environment required. Healthcare or pharmacy-related experience preferred. Experience with data security, encryption, data masking, DLP technologies, data discovery and classification tools, and data privacy, including cloud access security broker (CASB) solutions. Experience in framework and architecture of cloud and multi-tenant environments, including AWS. Industry recognized certification within the domain of information security, information technology and privacy (e.g., CISSP, GIAC, CISM, CIPT, CIPP/US, etc.) preferred. Understanding of healthcare privacy program core elements as it relates to regulatory oversight, monitoring requirements and data security measures (HITRUST, NIST, ITIL, HIPAA, HITECH, etc.) Advanced experience with Microsoft Office applications and ability to learn new software applications. Excellent research skills and ability to exercise independent judgement to determine which changes in regulatory landscape should be presented in collateral and training. Excellent analytical skills, ability to analyze components of legislation and implement and draft necessary policies and procedures based upon regulatory requirements. Excellent composition and drafting skills, with emphasis on various compliance/regulatory documents and correspondence. Excellent communication skills, both verbal and written, and excellent interpersonal skills. Ability to effectively build and maintain relationships with both internal and external stakeholders. Proficiency in performing necessary research and preparing substantive work which requires knowledge of compliance concepts, with emphasis on HIPAA/HITECH. Possess initiative, creativity, project management and organizational abilities. Proven examples of displaying the Reliance values: Collaborative, Accessible, Results-Oriented, Empowering, Supportive.

Essential Accountabilities

• Research state and federal statutes and regulations concerning data privacy and handling such as, but not limited to state privacy laws, HIPAA/HITECH, DSCSA, PCI DSS; and monitor and track for any changes or updates.
• Research and maintain an understanding of the compliance obligations of our team, including, but not limited to: HIPAA/HITECH, data privacy and security, cybersecurity industry practices, cloud environment protection, and artificial intelligence, and shall provide recommendations to Reliance Rx leadership to communicate, as appropriate.
• Monitor emerging artificial intelligence laws, regulations, and industry guidance; assess organizational use of AI technologies for compliance with applicable regulatory, privacy, security, and governance requirements.
• Research and present appropriate cybersecurity certifications to Reliance Rx leadership, and where implemented initiate and maintain such certifications and the requirements.
• Support tracking and monitoring of contractual technical risk maintenance and compliance processes to ensure adherence with key contract terms and conditions.
• Facilitate coordination with parent Information Risk Office, and other relevant departments as needed during negotiation and review of Reliance Rx contracts containing technical compliance, HIPAA/HITECH, and related security terms.
• Support RFP requests and other contractually required cybersecurity assessments and questionnaires.
• Coordinate and support third-party security risk assessments, including vendor due diligence reviews, cybersecurity questionnaires, and remediation tracking.
• Support the development, implementation, communication, and continuous improvement of Reliance Rx's technical compliance, privacy, cybersecurity, and information security programs in collaboration with parent company Compliance and Information Risk teams.
• Manage technical compliance policies, procedures, standards, and related governance processes, including regulatory review, updates, documentation, and organizational communication.
• Develop and maintain cybersecurity risk management processes, including security assessments, incident response planning, risk tracking, vulnerability management, and remediation oversight.
• Monitor and report on technical compliance, cybersecurity, privacy, and security metrics, key risk indicators, regulatory requirements, and program effectiveness.
• Coordinate technical compliance training, security awareness initiatives, onboarding, annual education, attestations, and assessments for associates.
• Oversee the identification, investigation, escalation, reporting, and remediation of technical compliance, privacy, and security incidents, including corrective action plans.
• Collaborate with business, operational, and technical teams to establish and monitor data governance, data protection, access management, retention, and security controls.
• Coordinate cybersecurity testing and monitoring activities, including vulnerability assessments, penetration testing, phishing simulations, endpoint monitoring, and risk reviews, ensuring timely remediation and leadership reporting.
• Serve as the primary liaison between Reliance Rx and parent Compliance and Information Risk functions for technical compliance, privacy, security audits, investigations, assessments, and regulatory inquiries.
• Facilitate compliance committee activities, risk exception reviews, security governance processes, and related reporting requirements.
• Act as the primary point of contact for associate technical compliance, privacy, and security inquiries, concerns, and reporting.
• Promote organizational awareness of technical compliance, privacy, and cybersecurity requirements through ongoing communication, education, and engagement initiatives.

This is a hybrid position with onsite attendance required at our Williamsville location. Immigration or work visa sponsorship will not be provided for this position.

Hiring Compensation Range: $70,000 - $90,000 annually Compensation may vary based on factors including but not limited to skills, education, location and experience. In addition to base compensation, associates may be eligible for a scorecard incentive, full range of benefits and generous paid time off. The base salary range is subject to change and may be modified in the future.

As an Equal Opportunity / Affitative Action Employer, Independent Health and its affiliates will not discriminate in its employment practices due to an applicant’s race, color, creed, religion, sex (including pregnancy, childbirth or related medical conditions), sexual orientation, gender identity or expression, transgender status, age, national origin, marital status, citizenship and immigration status, physical and mental disability, criminal record, genetic information, predisposition or carrier status, status with respect to receiving public assistance, domestic violence victim status, a disabled, special, recently separated, active duty wartime, campaign badge, Armed Forces service medal veteran, or any other characteristics protected under applicable law.

Reliance Rx is a URAC, ACHC and JCAHO accredited specialty pharmacy providing specialty medications such as injectable, infused and select oral therapies for those living with life-threatening diseases and/or managing a chronic or rare condition. We are committed to the specialty pharmacy needs of our customers patients and health care professionals alike. Headquartered in Buffalo, New York, we offer a specialty pharmacy that's readily available to fill prescriptions and directly manage distribution and care coordination resulting in greater efficiency, lower costs and improved service for these complex products. Through enhanced communication between physicians, patients and our specialty pharmacy, we aim to achieve maximum appropriate therapy adherence and promote positive clinical outcomes.

Please note, we do not accept unsolicited resumes. We do not accept resumes from headhunters, placement agencies, or other suppliers that have not signed a formal agreement with us. Reliance Rx is a drug-free workplace. Candidates are required to pass a drug test before beginning employment Relance RX is committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans. An applicant for employment in need of an accommodation to participate in the application and recruitment process should contact Human Resources at: [e-mail] or Human Resources, 15 Earhart Dr., Buffalo, NY 14221.