Privacy and Compliant Consultant

Insight Global (United States); United States; On-site; USD 120,000 - 170,000; Full time

Job summary

Insight Global (United States) seeks an experienced Information Assurance and Privacy Consultant to assess regulatory, privacy, and compliance risks across a complex enterprise. You will translate findings for leadership and collaborate with legal, privacy, compliance, and security teams, focusing on HIPAA and 42 CFR Part 2 in healthcare settings.

The role requires 5-6+ years in consulting, deep enterprise risk experience, and the ability to provide practical guidance without legal advice.

Qualifications

• 5-6+ years of consulting experience.
• Strong enterprise information assurance, privacy, and regulatory risk experience.
• HIPAA Security / Privacy assessment experience.
• Direct 42 CFR Part 2 experience, including applicability within behavioral health or substance-use-disorder environments.
• Experience assessing protected data and privacy risk in complex healthcare environments.
• Ability to translate regulatory requirements and technical findings into business risk and actionable recommendations.
• Ability to provide regulatory/compliance guidance without presenting legal advice.

Responsibilities

• Assess findings for privacy, regulatory, and compliance risk.
• Advise on HIPAA Security and Privacy requirements.
• Evaluate 42 CFR Part 2 applicability and protected-data considerations.
• Review how sensitive/protected data is accessed, handled, and assessed.
• Distinguish material compliance risks from lower-priority observations.
• Work directly with legal, privacy, compliance, and security teams.
• Support documentation of the overall enterprise compliance risk position.
• Translate technical findings into executive-level business and regulatory impact.

Skills

Consulting experience

Information assurance

Privacy regulatory risk

HIPAA security/privacy

42 CFR Part 2 experience

Regulatory guidance

Job description

We are looking for an experienced Information Assurance / Privacy Consultant to help assess regulatory, privacy, and compliance risks across a complex enterprise environment. This person will evaluate findings through a regulatory and privacy lens, advise on protected-data requirements, and help determine which findings represent material compliance risk. The role requires strong experience working with legal, privacy, compliance, and security stakeholders and translating technical findings into clear business and regulatory impact. Healthcare experience is highly valuable, particularly around HIPAA and 42 CFR Part 2, but candidates with a strong Big Four or assurance background in other highly regulated industries may also bring relevant experience.

Day-to-Day Responsibilities

• Assess findings for privacy, regulatory, and compliance risk.
• Advise on HIPAA Security and Privacy requirements.
• Evaluate 42 CFR Part 2 applicability and protected-data considerations.
• Review how sensitive/protected data is accessed, handled, and assessed.
• Distinguish material compliance risks from lower-priority control observations.
• Work directly with legal, privacy, compliance, and security teams.
• Support documentation of the overall enterprise compliance risk position.
• Translate technical findings into executive-level business and regulatory impact.
• Provide practical regulatory guidance without crossing into legal advice.

Must Haves

• 5-6+ years of consulting experience
• Strong enterprise information assurance, privacy, compliance, and regulatory risk experience
• Substantial HIPAA Security / Privacy assessment experience Direct 42 CFR Part 2 experience, including applicability within behavioral health or substance-use-disorder environments
• Experience assessing protected data and privacy risk in complex healthcare environments
• Experience working directly with legal, privacy, compliance, and security stakeholders
• Ability to translate regulatory requirements and technical findings into business risk and actionable recommendations
• Ability to provide regulatory/compliance guidance without presenting legal advice

Nice to Haves

• Big Four / major consulting or assurance organization background
• Behavioral health experience
• Multi-entity healthcare experience OCR enforcement, breach-response, or healthcare privacy investigation experience
• Broader experience across regulated industries such as financial services
• Experience working with other regulatory frameworks and agencies, such as SEC-related requirements