Healthcare Security Analyst

Job ID: NC-813484 (98591021)

Hybrid/Local NC Govt Healthcare Security Analyst (12+) with privacy, RHTP Initiative 6, NIST/HIPAA, vendor/risk management/compliance and Medicaid/public health experience

Location: Raleigh, NC (NCDHHS Privacy and Security Office)
Duration: 12 Months

Skills:
Experience working with NC DHHS or other state government health and human services organizations. Required 2 Years
Direct experience supporting Medicaid, healthcare, public health, or human services programs. Required 5 Years
Experience with RHTP Initiative 6 or similar large-scale healthcare transformation initiatives. Required 1 Years
Experience implementing privacy and security by design within technology and business initiatives. Required 5 Years
Familiarity with NIST Cybersecurity Framework, NIST Privacy Framework, NIST SP 800-53, or similar security/privacy frameworks. Required 5 Years
Experience Performing risk assessments based on NIST 800-53 Rev 5.. Required 7 Years
Knowledge of Federal Requirements such as HIPAA Security Rule and Privacy Rule implementation Required 5 Years
Experience in reviewing RFP, RFQ, MOU and MOA for privacy and security regulatory requirements for RHTP Initiative 6 Required 7 Years

Description:
NC DHHS Privacy and Security Office (PSO) requiring services to access privacy, security, regulatory requirements, guidance, best practices, that help protect confidential information for RHTP

NC DHHS Privacy and Security Office (PSO) requiring services to provide privacy and security leadership and support for RHTP initiatives in alignment with NC DHHS Privacy and Security Office (PSO) requirements and applicable federal and state regulations. The position is responsible for supporting privacy and security governance, reviewing contracts and agreements-including Memoranda of Agreement (MOA), Memoranda of Understanding (MOU), Business Associate Agreements (BAA), and data-sharing agreements-identifying and mitigating privacy and security risks, and ensuring the appropriate protection of sensitive information.
The position also supports privacy and security assessments, third-party/vendor risk management, incident response, compliance and audit activities, data governance, policy and procedure development, and privacy, privacy and security by design, data-flow review, vendor oversight, incident response, and change management and security awareness. The role works collaboratively with RHTP leadership, program teams, legal, IT, compliance, and external partners to integrate privacy and security requirements throughout RHTP initiatives and maintain a strong culture of privacy, security, and regulatory compliance.

innoSoul, Inc. is an Information Technology company and offers technology solutions in various platforms to different business domains. More specifically, business solutions for Application Development, System integration, network or software installation support, Custom Web Development, Hosting solutions. Our value-added solutions leverage technology to enhance business performance, increase productivity and secure data.