Privacy & Security Enterprise Engagement Officer

Sunshine Health; United States; Hybride; USD 108 000 - 199 000; Plein temps

Avantages offerts par ce poste

Competitive pay

Health insurance

401K and stock purchase plans

Tuition reimbursement

Paid time off plus holidays

Flexible work arrangements (remote/hyb

Résumé du poste

Centene Corp. in the United States seeks a senior privacy/security/compliance professional to translate laws and contracts into enterprise controls. You will lead EPSRM engagements with health plans or shared services and guide cross‑functional teams on compliance expectations.

You will manage evidence, responses to regulators and auditors, and drive standardized processes to improve compliance maturity while supporting market expansion and RFPs.

Qualifications

• 7+ years privacy/security, risk, or compliance within the managed care, payer/health plan industry required.
• 5+ years identifying, analyzing, and communicating security or privacy control requirements within health plan operations, processes, and systems required.
• Experience in assessing and interpreting contract and regulatory requirements, translating them into control-based operational capabilities, and ensuring delivery across multiple stakeholders required.
• Experience interpreting, implementing and ensuring compliance with State & Federal Privacy, Cybersecurity & AI laws & regulations applicable to healthcare payors and related business entities (HIPAA/HITECH, CCPA/CPRA, CPA, CTDPA, CAIA, VPA, COPPA, TCPA, etc.) required.

Responsabilités

• Lead EPSRM engagement with Health Plans or Shared Services to ensure privacy, security, AI, and business continuity requirements are clearly understood, implemented, and monitored.
• Translate regulatory, contractual, and legal requirements into operational controls and guide stakeholders on compliance expectations.
• Validate and manage compliance evidence, deliverables, and audit readiness, including responses to regulators, clients, and internal/external auditors.
• Build and maintain strong relationships with leadership, operational teams, and regulators to remove obstacles, resolve issues, and support consistent compliance practices.
• Track regulatory, legislative and contract changes, assess organizational impact, and communicate required actions while supporting scalable control updates.
• Oversee the accuracy and completeness of privacy, security, AI, and business continuity documentation, including plans, attestations, questionnaires, and related submissions.
• Enhance enterprise engagement processes by driving standardized procedures, governance practices, templates, and continuous improvement efforts.
• Support new market entries, RFP responses, contract renewals, and business expansion by providing specialized EPSRM subject‑matter expertise.
• Identify risks and control gaps, recommend mitigation strategies, and contribute to improved compliance maturity across the enterprise.

Connaissances

Privacy

Security

Risk management

Compliance

Formation

Bachelor's Degree in Information Security or related

Master's Degree preferred

Juris Doctor (JD) preferred

Outils

CISSP / CISM certifications

CIP / AIGP / CRISC / CISA certifications

Description du poste

Position Purpose:

Partners with either Health Plans or Shared Services to translate privacy, security, artificial intelligence (AI), business continuity, and related requirements from client contracts, laws, and regulations into actionable enterprise controls. Builds trusted relationships with Health Plan leadership and key stakeholders to ensure contract assurance, readiness reviews, Request for proposal (RFP) support, timely deliverable fulfillment, compliance reporting, and continuous improvement. Drives early engagement with Enterprise Privacy, Security and Risk Management (EPSRM) visibility and influence across the organization.

• Lead EPSRM engagement with Health Plans or Shared Services to ensure privacy, security, AI, and business continuity requirements are clearly understood, implemented, and monitored.


• Interpret and translate regulatory, contractual, and legal requirements into operational controls and guide stakeholders on compliance expectations.


• Validate and manage compliance evidence, deliverables, and audit readiness, including responses to regulators, clients, and internal/external auditors.


• Build and maintain strong relationships with leadership, operational teams, and regulators to remove obstacles, resolve issues, and support consistent compliance practices.


• Track regulatory, legislative and contract changes, assess organizational impact, and communicate required actions while supporting scalable control updates.


• Oversee the accuracy and completeness of privacy, security, AI, and business continuity documentation, including plans, attestations, questionnaires, and related submissions.


• Enhance enterprise engagement processes by driving standardized procedures, governance practices, templates, and continuous improvement efforts.


• Support new market entries, RFP responses, contract renewals, and business expansion by providing specialized EPSRM subject‑matter expertise.


• Identify risks and control gaps, recommend mitigation strategies, and contribute to improved compliance maturity across the enterprise.


• Performs other duties as assigned.


• Complies with all policies and standards.

Education/Experience:

Bachelor's Degree in Information Security, Information Systems, Risk/Compliance, Business, Law, or Compliance related capabilities or equivalent experience as a paralegal required.
Master's Degree in a related field preferred.
Juris Doctor (JD) preferred.

• 7+ years privacy/security, risk, or compliance within the managed care, payer/health plan industry required.


• 5+ years identifying, analyzing, and communicating security or privacy control requirements within the context of health plan operations, processes, and systems required.


• Experience in assessing and interpreting contract and regulatory requirements, translating them into control-based operational capabilities, and ensuring delivery across multiple stakeholders required.


• Experience interpreting, implementing and ensuring compliance with State & Federal Privacy, Cybersecurity & AI laws & regulations applicable to healthcare payors and related business entities (i.e., HIPAA/HITECH, CCPA/CPRA, CPA, CTDPA, CAIA, VPA, COPPA, TCPA, etc.) required.

Licenses/Certifications:

• CISSP / CISM Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM) Upon Hire required.


• Certified Information Privacy Professional (CIP), Artificial Intelligence Governance Professional (AIGP), Certified Risk and Information Systems Control (CRISC) or Certified Information Security Analyst (CISA)) or equivalent preferred.

Pay Range: $107,700.00 - $199,300.00 per year

About Centene:

At Centene, we connect people to the care they need to live healthier lives — and the work you do here makes that impact real every day. You’ll take on meaningful challenges that directly support individuals, families, and communities, building your skills while making healthcare more accessible and effective. It’s work with a purpose you can see, backed by a team committed to improving lives well beyond the workday.

Centene offers a comprehensive benefits package including:

• competitive pay


• health insurance


• 401K and stock purchase plans


• tuition reimbursement


• paid time off plus holidays


• a flexible approach to work with remote, hybrid, field or office work schedules

Actual pay will be adjusted based on an individual's skills, experience, education, and other job-related factors permitted by law, including full-time or part-time status. Total compensation may also include additional forms of incentives. Benefits may be subject to program eligibility.

Centene is an equal opportunity employer that is committed to diversity, and values the ways in which we are different. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or other characteristic protected by applicable law.

Qualified applicants with arrest or conviction records will be considered in accordance with the LA County Ordinance and the California Fair Chance Act