Director, Privacy & Security Enterprise Engagement

You could be the one who changes everything for our 28 million members. Centene is transforming the health of our communities, one person at a time. As a diversified, national organization, you’ll have access to competitive benefits including a fresh perspective on workplace flexibility.

The Director leads the Privacy & Security Enterprise Engagement Officers (EEO) Market Team within Enterprise Privacy & Security Risk Management (EPSRM). This role translates privacy, security, artificial intelligence (AI), business continuity, and related obligations from client contracts—including laws and regulations—into actionable enterprise requirements. The Director builds trusted partnerships with Health Plan leadership and key enterprise stakeholders (Enterprise Compliance, Operations, Business Technology Solutions, ITCC, Privacy, Vendor Risk, Legal, etc.)

to drive contract assurance, readiness reviews, RFP support, and continuous improvement. The position ensures team alignment with EPSRM’s goals and accountability for Health Plan deliverables.

• Lead, coach, and scale the Market EEO team to deliver consistent, high-quality engagement across all assigned state Medicaid Health Plans and the Medicare and Marketplace lines of business
• Align staffing and resources to market and line of business complexity, volume, and key cycles
• Ensure the team’s alignment with and achievement of defined goals
• Responsible for onboarding, training, allocating and prioritizing tasks, setting goals, and managing performance and career development for team members
• Serve as the primary EPSRM engagement leader for Health Plan lines of business; support stakeholders as needed to track obligations, risks, and decisions
• Direct and oversee the team’s ongoing efforts to serve as a subject-matter-expert for privacy, security and AI requirements and ensure regulatory, legislative, and contractual privacy, security & AI requirements are understood and operationalized
• Provide Executive-ready updates for Health Plan and EPSRM leadership
• Build trusted relationships with internal and external stakeholders to resolve blockers and escalate issues effectively
• Meet with regulators or other state representatives to answer questions and achieve clarity on the understanding of requirements
• Meet with auditors to demonstrate Centene's privacy, security, AI and operational resilience compliance
• Interpret and operationalize privacy, security, AI, and business continuity obligations from contracts, RFPs, and laws/regulations (e.g., HIPAA, CMS/MARS-E/ARC-AMPE, NCQA, state Medicaid/Exchange)
• Maintain a centralized requirements & deliverables register or pipeline mapping obligations to owners, timelines, and evidence for audits & assessments
• Ensure adequacy of control validation evidence and support gap closure prior to delivery or readiness reviews
• Monitor legal and regulatory changes and how they are/will impact contracts and effectively communicating impacts to stakeholders
• Direct and oversee the team’s ongoing efforts to discover, assess impact of, and communicate new or changing regulatory, legislative, and contractual requirements related to privacy, security, AI and operational resilience
• Direct and oversee the team's ongoing efforts to identify and bring awareness to privacy, security, AI and operational resilience risks and control gaps, and champion solutions for those within the context of Centene's business operations and technology environments in partnership with internal and external teams to EPSRM
• Ensure System Security Plans (SSPs) or System Security & Privacy Plans (SSPPs) and other related deliverables are accurate & complete
• Establish and mature processes for plan deliverables (i.e., SSPs/SSPPs, BCP plans, incident response attestations, vendor security attestations, etc.)
• Lead EPSRM contributions to new market entries, procurements, and renewals—including RFP responses and readiness reviews
• Direct and oversee the team’s ongoing efforts to ensure privacy, security, AI and operational resilience objectives are treated as business and technology requirements
• Facilitate regulator and client requests with timely, accurate…