VP, Privacy Compliance

NRC Health helps healthcare organizations deeply understand the people they serve and turning that "Human Understanding" into meaningful action. At its core, our work is about helping organizations build trust, improve engagement, and advance better outcomes.

Our associates. . .

Make a Meaningful Difference
- Serve with purpose, care, and follow-through.

Move with Urgency and Precision
- Act quickly, thoughtfully, and with discipline.

Own the Outcome
- Measure impact, follow through, and deliver results.

Win as One Team
- Work across boundaries as one team with one culture.

Build What Healthcare Values
- Innovate for the complexity of healthcare.

We know our associates do their best work when they feel supported both personally and professionally. That's why we offer benefits designed to help you thrive:

• My Time Off (MTO), our flexible paid time off program
• Up to 12 weeks of paid parental and emergency leave
• Comprehensive medical, dental, and vision coverage
• Wellness program and financial coaching
• Professional growth and career development opportunities

• Do you champion excellence in the teams you lead?
• Are you a diligent protector of your organization, associate, and customers’ privacy?
• Do you naturally draw valid conclusions from data and facts when solving abstract problems?

The VP, Privacy Compliance will lead our privacy program and ensure compliance with privacy laws and regulations. This role is responsible for developing and implementing privacy policies, procedures, and controls to safeguard sensitive data, promote privacy best practices, and maintain trust with our stakeholders. Additionally, the position will represent NRC Health’s Information Security program through engagement with client security and compliance executives.

Specific responsibilities include:

• Develop and implement comprehensive security policies and procedures that comply with regulatory requirements and align with industry best practices.
• Oversee the development and enforcement of privacy policies and procedures to ensure the protection of personal and sensitive information in compliance with legal and regulatory frameworks.
• Liaise with stakeholders, including the Board, to report on security and privacy matters regularly, ensuring that senior management is informed of risks and threats.
• Facilitate the incorporation of security throughout the organization using written policies, procedures, and training
• Coordinate the development, review and acceptance of system security plans with relevant parties
• Implement and provide ongoing administrative support for the organizations’ security and risk management programs
• Accountable for responding to customer security questionnaires, RFP security assessments and addressing client security related matters.
• Coordinate the audit and remediation of annual and quarterly security audit results as related to IT security systems
• Manage business continuance/disaster recovery (BC/DS)

• Bachelor's degree required
• Certification in information security, risk management, or privacy (e.g. CISSP, CIPP, CISM)
• Experience in leading the response to and investigation of security incidents and data breaches
• Information security and data privacy experience in a healthcare covered entity or Business Associate organization
• Comprehensive knowledge of Healthcare industry standards related to HIPAA, HITRUST, Sarbanes-Oxley, including experience with HITRUST implementation and certification
• Proven experience in developing and maintaining compliance programs, including risk assessments, policy creation, and auditing
• Strong leadership skills and the ability to work effectively with business managers, IT engineering, and IT operations staff.
• Previous experience in a public sector…