Security & Compliance Analyst (Hybrid) – Data Privacy & Risk

Commonwealth of VA Careers; Richmond (VA); Hybride; USD 65 000 - 100 000; Plein temps

Résumé du poste

Commonwealth of VA Careers seeks a Security & Compliance Analyst to join the Health Benefit Exchange’s Information Security team in a hybrid role that balances in-office and telework days. The position focuses on protecting resident data and ensuring adherence to state and federal privacy and security regulations.

The analyst will coordinate with federal agencies, SCC teams, vendors, and third parties to perform assessments, audits, and compliance activities, while reporting findings to HBE

Responsabilités

• Coordinate with federal agencies, SCC internal teams, vendors, and 3rd parties to perform privacy and security assessments, audits, and other security and privacy compliances activities
• Conduct complex audits of HBE partners and vendors to evaluate compliance with privacy and security requirements
• Lead and participate in internal assessments to evaluate compliance with information security and privacy policies, procedures, regulations, and agreements
• Monitor regulatory changes, evaluate impacts, and prepare reports and recommendations for compliance on security and privacy policies for HBE senior leadership
• Review and update security and privacy control documentation to ensure it is accurate, up to date, and adheres to legal and regulatory requirements
• Develop and present compliance findings from audits and assessments to HBE senior leadership and prepare remediation reports
• Develop, update, and support implementation of data security and privacy protection policies and procedures
• Coordinate with vendors and monitor complex security and privacy incidents
• Contribute to continuous improvement efforts
• Perform related work as required

Description du poste

Commonwealth of VA Careers seeks a Security & Compliance Analyst to join the Health Benefit Exchange’s Information Security team in a hybrid role that balances in-office and telework days. The position focuses on protecting resident data and ensuring adherence to state and federal privacy and security regulations.

The analyst will coordinate with federal agencies, SCC teams, vendors, and third parties to perform assessments, audits, and compliance activities, while reporting findings to HBE