Privacy and Security Policy Writer

Astyra Corporation; Raleigh (NC); Hybrid; USD 78,000 - 112,000; Full time

Job summary

Astyra Corporation is seeking a Privacy and Security Policy Writer for a 9-month contract in Raleigh, NC. The role develops and maintains clear policies governing privacy and information security, aligning with HIPAA, NIST, CMS, and internal standards.

The candidate will collaborate with SMEs, legal, compliance, and cybersecurity teams to translate complex concepts into accessible policy language, manage document versioning, and prepare trainings and summaries for internal audiences.

Qualifications

• Research, develop, draft, and update policies, procedures, guidance documents, and manuals.
• Analyze existing policies to identify gaps, inconsistencies, redundancies, or misalignment with regulatory or operational requirements.
• Ensure written materials meet applicable fed. state and internal standards, including HIPAA, NIST frameworks, CMS requirements and enterprise policies.
• Work closely with SMEs to gather information, validate accuracy, and ensure clarity of content.
• Translate complex technical, regulatory, and operational concepts into clear, easy-to-understand policy language.
• Establish and maintain version control, document tracking, and standardized formatting for all policy documents.
• Support communication of policy updates, including summaries, presentations, and training materials for internal audiences.
• Align policy content with organizational strategy, legal obligations, operational workflows, and statewide directives.
• Collaborate with cross functional teams to ensure policies align with organizational strategy and operational needs

Responsibilities

• Develop, maintain, and update policies, procedures, and manuals to reflect current regulatory requirements and organizational practices.
• Review existing policies to identify gaps, inconsistencies, and misalignments with HIPAA, NIST, CMS, and internal standards.
• Collaborate with SMEs, legal, compliance, cybersecurity, and leadership to gather information and validate accuracy.
• Translate technical and regulatory content into clear, user-friendly policy language for diverse audiences.
• Establish and enforce version control, document tracking, and standardized formatting across policy documents.
• Create summaries, presentations, and training materials to communicate policy updates to internal teams.
• Ensure policy content aligns with organizational strategy, federal/state directives, and operational workflows.
• Coordinate with cross-functional teams to maintain policy consistency across departments.

Skills

Policy drafting

Policy analysis

Regulatory compliance (HIPAA/NIST/CMS)

SME collaboration

Policy translation

Version control

Policy communications

Policy alignment

Cross-functional collaboration

Job description

Privacy and Security Policy Writer

*This is a 9-month contract position

*Hybrid – Local to Raleigh, NC only, please

Description

The Policy Writer plays a critical role in developing and maintaining clear accurate and compliant policies that support privacy security and regulatory obligations.

This position researches drafts and updates policies and procedures related to information security privacy practices system governance and operational compliance. The Policy Writer ensures alignment with state and federal requirements and collaborates closely with subject matter experts SMEs legal counsel compliance officers’ cybersecurity teams and executive leadership. The ideal candidate must have health background.

Required Skills/Knowledge/Experience:

• Research, develop, draft, and update policies, procedures, guidance documents, and manuals, Required 5 Years
• Analyze existing policies to identify gaps, inconsistencies, redundancies, or misalignment with regulatory or operational requirements., Required 5 Years
• Ensure written materials meet applicable fed. state and internal standards, including HIPAA, NIST frameworks, CMS requirements and enterprise policies, Required 5 Years
• Work closely with SMEs to gather information, validate accuracy, and ensure clarity of content, Required 5 Years
• Translate complex technical, regulatory, and operational concepts into clear, easy-to-understand policy language., Required 5 Years
• Establish and maintain version control, document tracking, and standardized formatting for all policy documents., Required 5 Years
• Support communication of policy updates, including summaries, presentations, and training materials for internal audiences., Required 5 Years
• Align policy content with organizational strategy, legal obligations, operational workflows, and statewide directives, Required 5 Years
• Collaborate with cross functional teams to ensure policies align with organizational strategy and operational needs, Required 5 Year