Privacy and Security Policy Writer

VIVA USA Inc; Raleigh (NC); Hybrid; USD 80,000 - 120,000; Full time

Job summary

VIVA USA Inc. seeks a Policy Writer to develop and maintain clear, accurate policies supporting privacy, security, and regulatory obligations. You will research, draft, and update policies related to information security, privacy practices, and governance while collaborating with SMEs, legal, and leadership.

The role emphasizes health background and industry standards. The position is hybrid, with emphasis on aligning content to state and federal requirements and driving training materials for

Qualifications

• Draft and update policies for Privacy and Security Office.
• Ensure policies meet HIPAA, NIST, CMS, and internal standards.
• Translate complex regulatory concepts into clear policy language.
• Maintain version control and standardized document formatting.
• Collaborate with SMEs, legal, compliance, cybersecurity, and leadership.
• Communicate policy updates via summaries, presentations, and training.
• Align policy content with organizational strategy and directives.
• 5+ years of experience in policy writing or related roles.

Responsibilities

• Draft and revise client information security and privacy policies.
• Review existing policies for gaps and regulatory alignment.
• Coordinate with cross-functional teams to implement policies.
• Support training and awareness initiatives.

Skills

Policy drafting

Policy analysis

HIPAA compliance

NIST frameworks

SME collaboration

Regulatory alignment

Policy translation

Version control

Training material development

Job description

Hybrid

The Policy Writer for the client plays a critical role in developing and maintaining clear, accurate, and compliant policies that support the client’s privacy, security, and regulatory obligations. This position researches, drafts, and updates policies and procedures related to information security, privacy practices, system governance, and operational compliance. The Policy Writer ensures alignment with state and federal requirements and collaborates closely with subject‑matter experts (SMEs), legal counsel, compliance officers, cybersecurity teams, and executive leadership. The ideal candidate must have health backgroud.

Skill - Required / Desired - Amount of Experience

• Research, develop, draft, and update policies, procedures, guidance documents, and manuals for the Privacy and Security Office - Required - 5 Years
• Analyze existing policies to identify gaps, inconsistencies, redundancies, or misalignment with regulatory or operational requirements. - Required - 5 Years
• Ensure written materials meet applicable fed. state & internal standards, including HIPAA, NIST frameworks,CMS requirements & cliententerprise policies - Required - 5 Years
• Work closely with SMEs to gather information, validate accuracy, and ensure clarity of content - Required - 5 Years
• Translate complex technical, regulatory, and operational concepts into clear, easy-to-understand policy language. - Required - 5 Years
• Establish and maintain version control, document tracking, and standardized formatting for all policy documents. - Required - 5 Years
• Support communication of policy updates, including summaries, presentations, and training materials for internal audiences. - Required - 5 Years
• Align policy content with organizational strategy, legal obligations, operational workflows, and statewide directives - Required - 5 Years
• Collaborate with cross functional teams to ensure policies align with organizational strategy and operational needs - Required - 5 Years

Notes:

Hybrid

VIVA is an equal opportunity employer. All qualified applicants have an equal opportunity for placement, and all employees have an equal opportunity to develop on the job. This means that VIVA will not discriminate against any employee or qualified applicant on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status