VP, Privacy & Compliance (Healthcare)

Nrc-Health; Lincoln (NE); On-site; USD 175,000 - 250,000; Full time

Job summary

NRC Health is seeking a VP, Privacy Compliance to lead our privacy program, develop policies, and drive compliance with privacy laws. The role engages with client security and compliance executives to safeguard sensitive data and promote privacy best practices.

The position requires healthcare privacy expertise, strong leadership, and the ability to coordinate across legal, IT, and business teams to mitigate risks and strengthen trust with stakeholders.

Qualifications

• Bachelor's degree required.
• Certification in information security, risk management, or privacy (CISSP, CIPP, CISM).
• Experience in leading the response to and investigation of security incidents and data breaches.
• Information security and data privacy experience in a healthcare covered entity or Business Associate organization.
• Comprehensive knowledge of HIPAA, HITRUST, Sarbanes-Oxley, including HITRUST implementation/certification.
• Proven experience in developing and maintaining compliance programs, including risk assessments, policy creation, and auditing.
• Strong leadership skills and the ability to work effectively with business managers, IT engineering, and IT operations staff.

Responsibilities

• Develop and implement comprehensive security policies and procedures that comply with regulatory requirements and align with industry best practices.
• Oversee the development and enforcement of privacy policies and procedures to ensure protection of personal and sensitive information.
• Liaise with stakeholders, including the Board, to report on security and privacy matters regularly.
• Coordinate the development, review and acceptance of system security plans with relevant parties.
• Implement and provide ongoing administrative support for the organization's security and risk management programs.
• Accountable for responding to customer security questionnaires, RFP security assessments and addressing client security matters.
• Coordinate the audit and remediation of annual and quarterly security audit results as related to IT security systems.
• Manage business continuance/disaster recovery (BC/DS).

Skills

Leadership

Privacy program experience

Regulatory awareness

Security mindset

Education

Bachelor's degree

Tools

CISSP

CIPP

CISM

Job description

NRC Health is seeking a VP, Privacy Compliance to lead our privacy program, develop policies, and drive compliance with privacy laws. The role engages with client security and compliance executives to safeguard sensitive data and promote privacy best practices.

The position requires healthcare privacy expertise, strong leadership, and the ability to coordinate across legal, IT, and business teams to mitigate risks and strengthen trust with stakeholders.