Privacy Analyst / Security Analyst

First Roles; Raleigh (NC); On-site; USD 90,000 - 125,000; Full time

Job summary

The North Carolina Department of Health and Human Services (NCDHHS) seeks an experienced Privacy & Security Analyst to ensure regulatory compliance, perform risk assessments, support audits, and implement security best practices across the organization.

Ideal candidates bring 5+ years in information security/privacy, solid knowledge of HIPAA/HITECH/NIST, and experience with governance, risk, and compliance (GRC) in healthcare or government settings.

Qualifications

• 5+ years of experience in Information Security, Privacy, Risk Management, or Compliance.
• Strong knowledge of HIPAA, HITECH, NIST, IRS 1075, and cybersecurity standards.
• Experience conducting security risk assessments and compliance reviews.
• Knowledge of vulnerability management, incident response, and security controls.
• Experience developing and maintaining security policies and procedures.
• Strong understanding of access management, data protection, and governance frameworks.
• Experience working with healthcare, public sector, or government organizations.
• Excellent communication, documentation, and stakeholder management skills.

Responsibilities

• Perform privacy and security assessments for applications, systems, and projects.
• Identify risks, vulnerabilities, and compliance gaps; recommend remediation plans.
• Support HIPAA and other regulatory compliance initiatives.
• Assist with security incident investigations and corrective action activities.
• Review and maintain privacy and security policies, procedures, and standards.
• Collaborate with technical and business teams to implement security controls.
• Support internal and external audits and compliance reviews.
• Create reports, risk assessments, and executive-level documentation.
• Provide guidance on security best practices and regulatory requirements.

Skills

Information security

HIPAA, HITECH, NIST

Risk assessments

Vulnerability management

Security controls

Security policies & procedures

Access management & data protection

Stakeholder management

Tools

GRC tools

Cloud security (Azure/AWS)

Job description

The North Carolina Department of Health and Human Services (NCDHHS) is seeking an experienced Privacy & Security Analyst to support the Privacy and Security Office. The ideal candidate will be responsible for ensuring compliance with security and privacy regulations, conducting risk assessments, supporting audits, and implementing security best practices across the organization.

Required Skills & Experience

• 5+ years of experience in Information Security, Privacy, Risk Management, or Compliance.
• Strong knowledge of HIPAA, HITECH, NIST, IRS 1075, and cybersecurity standards .
• Experience conducting security risk assessments and compliance reviews.
• Knowledge of vulnerability management, incident response, and security controls.
• Experience developing and maintaining security policies and procedures.
• Strong understanding of access management, data protection, and governance frameworks.
• Experience working with healthcare, public sector, or government organizations.
• Excellent communication, documentation, and stakeholder management skills.

Responsibilities

• Perform privacy and security assessments for applications, systems, and projects.
• Identify risks, vulnerabilities, and compliance gaps; recommend remediation plans.
• Support HIPAA and other regulatory compliance initiatives.
• Assist with security incident investigations and corrective action activities.
• Review and maintain privacy and security policies, procedures, and standards.
• Collaborate with technical and business teams to implement security controls.
• Support internal and external audits and compliance reviews.
• Create reports, risk assessments, and executive-level documentation.
• Provide guidance on security best practices and regulatory requirements.

Preferred Qualifications

• CISSP, CISM, HCISPP, Security+, or similar certifications.
• Experience with Azure, AWS, or cloud security environments.
• Experience with GRC tools and frameworks.
• Previous State Government or Healthcare Industry experience.

Must-Have Keywords

HIPAA | HITECH | NIST | Risk Assessment | Information Security | Privacy Compliance | Security Audits | Vulnerability Management | Incident Response | Governance Risk Compliance (GRC)

Note: Candidates with State Government, Healthcare, or NCDHHS experience will be highly preferred.