Privacy and Security Policy Writer

Job Title: Privacy and Security Policy Writer- Healthcare Privacy & Information Security Policy Writer – HIPAA/NIST

Work Location: Raleigh, NC

Work Mode: Onsite

Work Auth: All Visas accepted (No H1 and No Fake Profiles)

Experience Required: 5–8 Years

Important Requirement

Only qualified candidates who are currently located in or near Raleigh, North Carolina and are able to work onsite will be considered.

Candidates must have a strong healthcare background with hands-on experience developing privacy, information security, compliance, and regulatory policies.

Job Summary

We are seeking an experienced Healthcare Privacy & Information Security Policy Writer to support a Privacy and Security Office in developing, reviewing, and maintaining enterprise policies, procedures, standards, guidance documents, and operational manuals.

The ideal candidate will have strong experience translating complex healthcare regulatory, privacy, cybersecurity, and operational requirements into clear and actionable policy documentation.

This role requires deep familiarity with HIPAA, NIST frameworks, CMS requirements, healthcare privacy regulations, information security governance, and enterprise compliance standards .

Required Experience

• Minimum 5 years of relevant policy writing, privacy, information security, compliance, or governance experience .

• Strong healthcare industry background required.

• Experience developing policies and procedures related to:

  • Healthcare privacy

  • Information security

  • Cybersecurity

  • System governance

  • Regulatory compliance

  • Data protection

• Strong knowledge of HIPAA requirements .

• Working knowledge of NIST cybersecurity and security-control frameworks .

• Familiarity with CMS requirements and healthcare regulatory standards .

• Experience working in highly regulated healthcare, government, insurance, Medicaid/Medicare, or public-sector environments is highly preferred.

Key Responsibilities

• Research, develop, draft, review, and update privacy and information security policies, procedures, guidance documents, standards, and manuals .

• Review existing policies to identify:

  • Compliance gaps

  • Inconsistencies

  • Redundant content

  • Outdated requirements

  • Misalignment with regulatory or operational standards

• Ensure policies comply with applicable federal, state, healthcare, and organizational requirements , including HIPAA, NIST frameworks, CMS requirements, and enterprise policies.

• Translate complex technical, legal, regulatory, cybersecurity, and operational requirements into clear and easy-to-understand policy language.

• Work closely with subject matter experts, legal counsel, compliance officers, privacy teams, cybersecurity teams, IT teams, and executive leadership .

• Gather information from SMEs and validate the accuracy and completeness of policy content.

• Align policies with organizational strategy, legal obligations, business processes, operational workflows, and statewide directives.

• Establish and maintain appropriate document version control, policy tracking, revision history, and standardized formatting .

• Maintain accurate records of policy changes, approvals, reviews, and publication status.

• Support the communication and rollout of new or revised policies.

• Develop policy summaries, presentations, training materials, and internal communications.

• Support policy awareness and compliance initiatives across internal departments.

• Collaborate with cross-functional teams to ensure policies are practical, compliant, and aligned with operational requirements.

Required Skills

• Healthcare Privacy & Security Policy Writing

• HIPAA

• NIST Cybersecurity Framework

• NIST Security Controls

• CMS Requirements

• Healthcare Compliance

• Information Security Governance

• Privacy Governance

• Regulatory Compliance

• Policy Development

• Policy Gap Analysis

• Technical Writing

• Procedure Development

• Document Governance

• Version Control

• Risk & Compliance Documentation

• Cybersecurity Policies

• Data Privacy

• Healthcare Regulations

• Stakeholder Management

Preferred Background

Ideal candidates may have experience working within:

• Healthcare organizations

• Medicaid / Medicare programs

• Health insurance organizations

• State healthcare agencies

• Government health departments

• Healthcare compliance organizations

• Privacy and Security Offices

• Cybersecurity Governance, Risk & Compliance teams

• Hospitals or health systems

Experience working directly with legal, compliance, privacy, cybersecurity, audit, and executive stakeholders is strongly preferred.