If you are a security, privacy, and compliance professional excited about helping build and operate a broad range of compliance functions at a mission-driven, healthcare technology company, this role is for you! You will work on initiatives that address the company’s complex security, privacy, and compliance challenges. You will build relationships across all parts of the business and drive cross-functional initiatives to continuously improve our privacy and compliance programs and support of the Collective Health security team. This role reports the Senior Manager of Privacy and Compliance and works cross-functionally with Security, Engineering, Product, and Customer Experience teams.

While we are embracing a remote-flexible work week, employees are expected to be within commuting distance of an office. The  frequency of in-office days will be determined on a team-by-team basis closer to the reopening of our offices.

In this role you will:

• Support day-to-day function of the Privacy and Compliance Program
• Triage, assign, and respond to reported relevant incidents including follow-up with reporting individuals
• Collaborate with team members to identify and mitigate security, privacy, and compliance risks
• Support assessments and audits against a wide variety of security and privacy regulatory and compliance frameworks, including but not limited to HIPAA, HITRUST, NIST, and state and federal privacy laws
• Responsible for designing and maintaining content of organizational Privacy and Compliance policies
• Support the business in RFP’s and customer security and privacy requests
• Provide timely input on compliance, security and privacy related issues and requests
• Build culture and awareness of security, privacy, and compliance, including new hire training, department-specific training, and ongoing awareness activities

Qualifications:

• 1-5 years in healthcare privacy, corporate compliance, healthcare compliance, health plan operations, provider operations, or information security assurance
• Familiarity with HIPAA, HITECH, NIST, and other healthcare privacy/security based standards, certifications, or reviews
• Proven ability to build relationships and to collaborate effectively with a broad range of stakeholders and departments to drive compliance-friendly and business-friendly outcomes
• Experience identifying and mitigating new risks in heavily regulated or emerging technology areas
• Experience with issue identification and appropriate escalation
• Excellent communication and presentation skills
• Proficiency with technology tools, including Google Drive, Box, and Slack

Bonus Qualifications:

• Relevant experience at a rapidly growing technology or healthcare company
• Prior project management experience is a plus
• Track record of taking initiative, having the ability to work independently, and being comfortable in unstructured environments