VP, Privacy Compliance

Nrc-Health; Lincoln (NE); On-site; USD 175,000 - 250,000; Full time

Job summary

NRC Health is seeking a VP, Privacy Compliance to lead our privacy program, develop policies, and drive compliance with privacy laws. The role engages with client security and compliance executives to safeguard sensitive data and promote privacy best practices.

The position requires healthcare privacy expertise, strong leadership, and the ability to coordinate across legal, IT, and business teams to mitigate risks and strengthen trust with stakeholders.

Qualifications

• Bachelor's degree required.
• Certification in information security, risk management, or privacy (CISSP, CIPP, CISM).
• Experience in leading the response to and investigation of security incidents and data breaches.
• Information security and data privacy experience in a healthcare covered entity or Business Associate organization.
• Comprehensive knowledge of HIPAA, HITRUST, Sarbanes-Oxley, including HITRUST implementation/certification.
• Proven experience in developing and maintaining compliance programs, including risk assessments, policy creation, and auditing.
• Strong leadership skills and the ability to work effectively with business managers, IT engineering, and IT operations staff.

Responsibilities

• Develop and implement comprehensive security policies and procedures that comply with regulatory requirements and align with industry best practices.
• Oversee the development and enforcement of privacy policies and procedures to ensure protection of personal and sensitive information.
• Liaise with stakeholders, including the Board, to report on security and privacy matters regularly.
• Coordinate the development, review and acceptance of system security plans with relevant parties.
• Implement and provide ongoing administrative support for the organization's security and risk management programs.
• Accountable for responding to customer security questionnaires, RFP security assessments and addressing client security matters.
• Coordinate the audit and remediation of annual and quarterly security audit results as related to IT security systems.
• Manage business continuance/disaster recovery (BC/DS).

Skills

Leadership

Privacy program experience

Regulatory awareness

Security mindset

Education

Bachelor's degree

Tools

CISSP

CIPP

CISM

Job description

NRC Health helps healthcare organizations deeply understand the people they serve and turning that “Human Understanding” into meaningful action. At its core, our work is about helping organizations build trust, improve engagement, and advance better outcomes.

Our associates. . .

Make a Meaningful Difference - Serve with purpose, care, and follow-through.

Move with Urgency and Precision - Act quickly, thoughtfully, and with discipline.

Own the Outcome - Measure impact, follow through, and deliver results.

Win as One Team - Work across boundaries as one team with one culture.

Build What Healthcare Values - Innovate for the complexity of healthcare.

Why NRC Health?

We know our associates do their best work when they feel supported both personally and professionally. That's why we offer benefits designed to help you thrive:

• My Time Off (MTO), our flexible paid time off program


• Up to 12 weeks of paid parental and emergency leave


• Comprehensive medical, dental, and vision coverage


• Wellness program and financial coaching


• Professional growth and career development opportunities

Who we want

• Do you champion excellence in the teams you lead?


• Are you a diligent protector of your organization, associate, and customers’ privacy?


• Do you naturally draw valid conclusions from data and facts when solving abstract problems?

What you will do

The VP, Privacy Compliance will lead our privacy program and ensure compliance with privacy laws and regulations. This role is responsible for developing and implementing privacy policies, procedures, and controls to safeguard sensitive data, promote privacy best practices, and maintain trust with our stakeholders. Additionally, the position will represent NRC Health’s Information Security program through engagement with client security and compliance executives.

Specific responsibilities include:

• Develop and implement comprehensive security policies and procedures that comply with regulatory requirements and align with industry best practices.


• Oversee the development and enforcement of privacy policies and procedures to ensure the protection of personal and sensitive information in compliance with legal and regulatory frameworks.


• Liaise with stakeholders, including the Board, to report on security and privacy matters regularly, ensuring that senior management is informed of risks and threats.


• Facilitate the incorporation of security throughout the organization using written policies, procedures, and training


• Coordinate the development, review and acceptance of system security plans with relevant parties


• Implement and provide ongoing administrative support for the organizations’ security and risk management programs


• Accountable for responding to customer security questionnaires, RFP security assessments and addressing client security related matters.


• Coordinate the audit and remediation of annual and quarterly security audit results as related to IT security systems


• Manage business continuance/disaster recovery (BC/DS)

What you need

• Bachelor's degree required


• Certification in information security, risk management, or privacy (e.g. CISSP, CIPP, CISM)


• Experience in leading the response to and investigation of security incidents and data breaches


• Information security and data privacy experience in a healthcare covered entity or Business Associate organization


• Comprehensive knowledge of Healthcare industry standards related to HIPAA, HITRUST, Sarbanes-Oxley, including experience with HITRUST implementation and certification


• Proven experience in developing and maintaining compliance programs, including risk assessments, policy creation, and auditing


• Strong leadership skills and the ability to work effectively with business managers, IT engineering, and IT operations staff.


• Previous experience in a public sector organization with a thorough understanding of the specific security and privacy requirements required


• Previous experience in a startup/venture backed/private equity organization a plus

Compensation

In the spirit of pay transparency, we are excited to share the base salary range for this position is $175,000 - $250,000, exclusive of fringe benefits or potential bonuses. Some of our roles offer performance-based variable compensation. Eligibility and potential payouts vary depending on the role and are tied to performance metrics. If you are hired at NRC Health, your final base salary compensation will be determined based on factors such as skills, education, and/or experience. In addition to those factors – we believe in the importance of pay equity and consider internal equity of our current team members as a part of any final offer. Please keep in mind that the range mentioned above is the full base salary range for the role. Hiring at the maximum of the range would not be typical in order to allow for future and continued salary growth. We also offer a generous compensation and benefits package. For more information on specific benefits, please refer to our Careers Page.

NRC Health is not currently hiring in DE, HI, MD, NJ, RI, D.C.

In general, NRC Health’s positions are closed within 30 days. However, factors such as candidate flow and business necessity may require NRC Health to shorten or extend the application window. We encourage our prospective candidates to submit their application expediently so as not to miss out on our opportunities.

Inclusion & Belonging

At NRC Health, Inclusion & Belonging are essential to our mission as a company devoted to greater Human Understanding. For information about our efforts in this area, please refer to our Equal Employment Opportunity policy.