Privacy & Security Analyst – HIPAA, NIST & GRC Expert

First Roles; Raleigh (NC); Sur place; USD 90 000 - 125 000; Plein temps

Résumé du poste

The North Carolina Department of Health and Human Services (NCDHHS) seeks an experienced Privacy & Security Analyst to ensure regulatory compliance, perform risk assessments, support audits, and implement security best practices across the organization.

Ideal candidates bring 5+ years in information security/privacy, solid knowledge of HIPAA/HITECH/NIST, and experience with governance, risk, and compliance (GRC) in healthcare or government settings.

Qualifications

• 5+ years of experience in Information Security, Privacy, Risk Management, or Compliance.
• Strong knowledge of HIPAA, HITECH, NIST, IRS 1075, and cybersecurity standards.
• Experience conducting security risk assessments and compliance reviews.
• Knowledge of vulnerability management, incident response, and security controls.
• Experience developing and maintaining security policies and procedures.
• Strong understanding of access management, data protection, and governance frameworks.
• Experience working with healthcare, public sector, or government organizations.
• Excellent communication, documentation, and stakeholder management skills.

Responsabilités

• Perform privacy and security assessments for applications, systems, and projects.
• Identify risks, vulnerabilities, and compliance gaps; recommend remediation plans.
• Support HIPAA and other regulatory compliance initiatives.
• Assist with security incident investigations and corrective action activities.
• Review and maintain privacy and security policies, procedures, and standards.
• Collaborate with technical and business teams to implement security controls.
• Support internal and external audits and compliance reviews.
• Create reports, risk assessments, and executive-level documentation.
• Provide guidance on security best practices and regulatory requirements.

Connaissances

Information security

HIPAA, HITECH, NIST

Risk assessments

Vulnerability management

Security controls

Security policies & procedures

Access management & data protection

Stakeholder management

Outils

GRC tools

Cloud security (Azure/AWS)

Description du poste

The North Carolina Department of Health and Human Services (NCDHHS) seeks an experienced Privacy & Security Analyst to ensure regulatory compliance, perform risk assessments, support audits, and implement security best practices across the organization.

Ideal candidates bring 5+ years in information security/privacy, solid knowledge of HIPAA/HITECH/NIST, and experience with governance, risk, and compliance (GRC) in healthcare or government settings.