Privacy & Security Engagement Officer

Centene Corporation; Colorado; Hybrid; USD 108,000 - 199,000; Full time

Benefits offered by this job

Health insurance

401K

Stock purchase plan

Tuition reimbursement

Paid time off

Flexible work schedule

Job summary

Centene Corporation is seeking a senior EPSRM professional to partner with Health Plans and Shared Services to translate privacy, security, AI, and business continuity requirements into actionable enterprise controls. You will lead cross‑functional engagements, drive audit readiness, and ensure regulatory and contract commitments are met across the organization.

You will interpret complex laws (HIPAA, HITECH, AI governance) and translate them into concrete controls, collaborate with executives

Qualifications

• 7+ years privacy/security, risk, or compliance within the managed care, payer/health plan industry required.
• 5+ years identifying, analyzing, and communicating security or privacy control requirements within health plan operations, processes, and systems required.
• Experience interpreting contract and regulatory requirements, translating them into control-based operational capabilities, and ensuring delivery across multiple stakeholders.
• Experience interpreting, implementing and ensuring compliance with State & Federal Privacy, Cybersecurity & AI laws & regulations applicable to healthcare payors and related business entities (HIPAA/HITECH, CCPA/CPRA, CPA, CTDPA, CAIA, VPA, COPPA, TCPA, etc.) required.

Responsibilities

• Lead EPSRM engagement with Health Plans or Shared Services to ensure privacy, security, AI, and business continuity requirements are clearly understood, implemented, and monitored.
• Interpret and translate regulatory, contractual, and legal requirements into operational controls and guide stakeholders on compliance expectations.
• Validate and manage compliance evidence, deliverables, and audit readiness, including responses to regulators, clients, and internal/external auditors.
• Build and maintain strong relationships with leadership, operational teams, and regulators to remove obstacles, resolve issues, and support consistent compliance practices.
• Track regulatory, legislative and contract changes, assess organizational impact, and communicate required actions while supporting scalable control updates.
• Oversee the accuracy and completeness of privacy, security, AI, and business continuity documentation, including plans, attestations, questionnaires, and related submissions.
• Enhance enterprise engagement processes by driving standardized procedures, governance practices, templates, and continuous improvement efforts.
• Support new market entries, RFP responses, contract renewals, and business expansion by providing specialized EPSRM subject‑matter expertise.
• Identify risks and control gaps, recommend mitigation strategies, and contribute to improved compliance maturity across the enterprise.
• Performs other duties as assigned.
• Complies with all policies and standards.

Skills

Stakeholder management

Regulatory interpretation

Risk assessment

Audit readiness

Education

Bachelor's degree in Information Security, Information Systems, Risk/Compliance, Business, Law, or Compliance related capabilities or equivalent experience as a paralegal

Master's degree preferred

Juris Doctor (JD) preferred

Job description

Position Purpose

Partners with either Health Plans or Shared Services to translate privacy, security, artificial intelligence (AI), business continuity, and related requirements from client contracts, laws, and regulations into actionable enterprise controls. Builds trusted relationships with Health Plan leadership and key stakeholders to ensure contract assurance, readiness reviews, Request for proposal (RFP) support, timely deliverable fulfillment, compliance reporting, and continuous improvement. Drives early engagement with Enterprise Privacy, Security and Risk Management (EPSRM) visibility and influence across the organization.

• Lead EPSRM engagement with Health Plans or Shared Services to ensure privacy, security, AI, and business continuity requirements are clearly understood, implemented, and monitored.
• Interpret and translate regulatory, contractual, and legal requirements into operational controls and guide stakeholders on compliance expectations.
• Validate and manage compliance evidence, deliverables, and audit readiness, including responses to regulators, clients, and internal/external auditors.
• Build and maintain strong relationships with leadership, operational teams, and regulators to remove obstacles, resolve issues, and support consistent compliance practices.
• Track regulatory, legislative and contract changes, assess organizational impact, and communicate required actions while supporting scalable control updates.
• Oversee the accuracy and completeness of privacy, security, AI, and business continuity documentation, including plans, attestations, questionnaires, and related submissions.
• Enhance enterprise engagement processes by driving standardized procedures, governance practices, templates, and continuous improvement efforts.
• Support new market entries, RFP responses, contract renewals, and business expansion by providing specialized EPSRM subject‑matter expertise.
• Identify risks and control gaps, recommend mitigation strategies, and contribute to improved compliance maturity across the enterprise.
• Performs other duties as assigned.
• Complies with all policies and standards.

Education/Experience

Bachelor's Degree in Information Security, Information Systems, Risk/Compliance, Business, Law, or Compliance related capabilities or equivalent experience as a paralegal required.

Master's Degree in a related field preferred.

Juris Doctor (JD) preferred.

• 7+ years privacy/security, risk, or compliance within the managed care, payer/health plan industry required.
• 5+ years identifying, analyzing, and communicating security or privacy control requirements within the context of health plan operations, processes, and systems required.
• Experience in assessing and interpreting contract and regulatory requirements, translating them into control-based operational capabilities, and ensuring delivery across multiple stakeholders required.
• Experience interpreting, implementing and ensuring compliance with State & Federal Privacy, Cybersecurity & AI laws & regulations applicable to healthcare payors and related business entities (i.e., HIPAA/HITECH, CCPA/CPRA, CPA, CTDPA, CAIA, VPA, COPPA, TCPA, etc.) required.

Licenses/Certifications

• CISSP / CISM Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM) Upon Hire required.
• Certified Information Privacy Professional (CIP), Artificial Intelligence Governance Professional (AIGP), Certified Risk and Information Systems Control (CRISC) or Certified Information Security Analyst (CISA)) or equivalent preferred.

Pay Range: $107,700.00 - $199,300.00 per year

At Centene, we connect people to the care they need to live healthier lives — and the work you do here makes that impact real every day. You’ll take on meaningful challenges that directly support individuals, families, and communities, building your skills while making healthcare more accessible and effective. It’s work with a purpose you can see, backed by a team committed to improving lives well beyond the workday.

Centene offers a comprehensive benefits package including: competitive pay, health insurance, 401K and stock purchase plans, tuition reimbursement, paid time off plus holidays, and a flexible approach to work with remote, hybrid, field or office work schedules. Actual pay will be adjusted based on an individual's skills, experience, education, and other job‑related factors permitted by law, including full-time or part‑time status. Total compensation may also include additional forms of incentives. Benefits may be subject to program eligibility.

Centene is an equal opportunity employer that is committed to diversity, and values the ways in which we are different. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or other characteristic protected by applicable law.

Qualified applicants with arrest or conviction records will be considered in accordance with the LA County Ordinance and the California Fair Chance Act