Network Compliance & Risk Administrator

Independent Health; Village of Williamsville (NY); Hybrid; USD 70,000 - 90,000; Full time

Benefits offered by this job

Scorecard incentive

Generous paid time off

Job summary

Independent Health is seeking a Network Compliance and Risk Administrator to oversee regulatory compliance related to cybersecurity, data governance and privacy. The role includes collaborating with the Information Risk Office, stakeholders, and external vendors to ensure adherence to HIPAA/HITECH and other standards.

The position emphasizes research, policy development, and training, with a hybrid work arrangement including onsite Williamsville participation.

Qualifications

• Bachelor’s degree required; four (4) years of experience in compliance, QA, auditing, or data governance within a regulated environment.
• Experience with data security, encryption, data masking, DLP, and data privacy tools including CASB is preferred.
• Knowledge of HIPAA/HITECH, HITRUST, NIST, ITIL and related privacy/security standards.
• Ability to interpret regulatory changes and translate them into policies and procedures.
• Excellent written and verbal communication; ability to manage cross‑functional relationships.

Responsibilities

• Research state and federal data privacy/regulatory requirements and monitor updates.
• Oversee technical compliance, privacy, cybersecurity programs in collaboration with Information Risk teams.
• Coordinate third‑party security assessments, vendor due diligence, and remediation tracking.
• Develop and maintain governance processes, policies, and training for associates.
• Lead security and privacy incident response, investigations and reporting.

Skills

Regulatory compliance

Data governance

Cybersecurity

HIPAA/HITECH knowledge

Communication skills

Project management

Education

Bachelor’s degree

Tools

AWS

CASB solutions

Data discovery tools

Job description

# **Overview**The Network Compliance and Risk Administrator shall be responsible for the overall execution, administration and monitoring of the compliance program as it relates to technical risk/cybersecurity, data governance and integrity, and data related law and regulation compliance to necessitate companywide adherence. The Network Compliance and Risk Administrator shall support various contract and regulatory activities and ensure the organization’s technical systems, processes and data handling comply with laws, regulations, and industry standards. They will report to the Deputy Counsel-Regulatory Compliance Manager and under their direction will be the liaison between Reliance Rx business units, the parent company Information Risk Office, related departments and applicable outside vendors or regulatory bodies related to these compliance matters.They will conduct regulatory research and analysis as it relates to proposed, pending or effective laws, rules, and regulations impactful to Reliance Rx cybersecurity, artificial intelligence, data governance and integrity, information privacy and security, and interoperability. They will assess and implement appropriate industry standard cybersecurity frameworks and related processes to ensure adequate hardening and protection of the Reliance Rx environment. The position will work closely with the Reliance Rx Leadership Team to ensure leadership is appraised of and in compliance with regulations governing Reliance Rx programs, as well as work closely with the pharmacy team and internal audit to ensure compliance with relevant regulations.# **Qualifications*** Bachelor’s degree required. An additional four (4) years of experience will be considered in lieu of degree.* Four (4) years of experience in compliance, quality assurance, auditing, or data governance/process management within a regulated environment required. Healthcare or pharmacy-related experience preferred.* Experience with data security, encryption, data masking, DLP technologies, data discovery and classification tools, and data privacy, including cloud access security broker (CASB) solutions.* Experience in framework and architecture of cloud and multi-tenant environments, including AWS.* Industry recognized certification within the domain of information security, information technology and privacy (e.g., CISSP, GIAC, CISM, CIPT, CIPP/US, etc.) preferred.* Understanding of healthcare privacy program core elements as it relates to regulatory oversight, monitoring requirements and data security measures (HITRUST, NIST, ITIL, HIPAA, HITECH, etc.)* Advanced experience with Microsoft Office applications and ability to learn new software applications.* Excellent research skills and ability to exercise independent judgement to determine which changes in regulatory landscape should be presented in collateral and training.* Excellent analytical skills, ability to analyze components of legislation and implement and draft necessary policies and procedures based upon regulatory requirements.* Excellent composition and drafting skills, with emphasis on various compliance/regulatory documents and correspondence.* Excellent communication skills, both verbal and written, and excellent interpersonal skills.* Ability to effectively build and maintain relationships with both internal and external stakeholders.* Proficiency in performing necessary research and preparing substantive work which requires knowledge of compliance concepts, with emphasis on HIPAA/HITECH.* Possess initiative, creativity, project management and organizational abilities.* Proven examples of displaying the Reliance values: Collaborative, Accessible, Results-Oriented, Empowering, Supportive.# **Essential Accountabilities*** Research state and federal statutes and regulations concerning data privacy and handling such as, but not limited to state privacy laws, HIPAA/HITECH, DSCSA, PCI DSS; and monitor and track for any changes or updates.* Research and maintain an understanding of the compliance obligations of our team, including, but not limited to: HIPAA/HITECH, data privacy and security, cybersecurity industry practices, cloud environment protection, and artificial intelligence, and shall provide recommendations to Reliance Rx leadership to communicate, as appropriate.* Monitor emerging artificial intelligence laws, regulations, and industry guidance; assess organizational use of AI technologies for compliance with applicable regulatory, privacy, security, and governance requirements.* Research and present appropriate cybersecurity certifications to Reliance Rx leadership, and where implemented initiate and maintain such certifications and the requirements.* Support tracking and monitoring of contractual technical risk maintenance and compliance processes to ensure adherence with key contract terms and conditions.* Facilitate coordination with parent Information Risk Office, and other relevant departments as needed during negotiation and review of Reliance Rx contracts containing technical compliance, HIPAA/HITECH, and related security terms.* Support RFP requests and other contractually required cybersecurity assessments and questionnaires.* Coordinate and support third-party security risk assessments, including vendor due diligence reviews, cybersecurity questionnaires, and remediation tracking.* Support the development, implementation, communication, and continuous improvement of Reliance Rx's technical compliance, privacy, cybersecurity, and information security programs in collaboration with parent company Compliance and Information Risk teams.* Manage technical compliance policies, procedures, standards, and related governance processes, including regulatory review, updates, documentation, and organizational communication.* Develop and maintain cybersecurity risk management processes, including security assessments, incident response planning, risk tracking, vulnerability management, and remediation oversight.* Monitor and report on technical compliance, cybersecurity, privacy, and security metrics, key risk indicators, regulatory requirements, and program effectiveness.* Coordinate technical compliance training, security awareness initiatives, onboarding, annual education, attestations, and assessments for associates.* Oversee the identification, investigation, escalation, reporting, and remediation of technical compliance, privacy, and security incidents, including corrective action plans.* Collaborate with business, operational, and technical teams to establish and monitor data governance, data protection, access management, retention, and security controls.* Coordinate cybersecurity testing and monitoring activities, including vulnerability assessments, penetration testing, phishing simulations, endpoint monitoring, and risk reviews, ensuring timely remediation and leadership reporting.* Serve as the primary liaison between Reliance Rx and parent Compliance and Information Risk functions for technical compliance, privacy, security, audits, investigations, assessments, and regulatory inquiries.* Facilitate compliance committee activities, risk exception reviews, security governance processes, and related reporting requirements.* Act as the primary point of contact for associate technical compliance, privacy, and security inquiries, concerns, and reporting.* Promote organizational awareness of technical compliance, privacy, and cybersecurity requirements through ongoing communication, education, and engagement initiatives. This is a hybrid position with onsite attendance required at our Williamsville location. Immigration or work visa sponsorship will not be provided for this position Hiring Compensation Range: $70,000 - $90,000 annually*Compensation may vary based on factors including but not limited to skills, education, location and experience.* In addition to base compensation, associates may be eligible for a scorecard incentive, full range of benefits and generous paid time off. The base salary range is subject to change and may be modified in the future.