Remote Medicaid Data Governance & Security Consultant

Medicaid Data Governance And Security Consultant

The Medicaid Data Governance and Security Consultant will serve as a key cybersecurity, privacy, and data governance leader supporting the Connecticut Medicaid Enterprise Transformation Services (CT METS) modernization program. This individual will be responsible for ensuring the security, integrity, privacy, and regulatory compliance of Medicaid data and systems throughout the Design, Development, and Implementation (DDI) and Maintenance & Operations (M&O) phases of the Medicaid Enterprise System (MES).

Working closely with the CT METS Director, Associate Director, Bureau of Information Technology Services (BITS), Agency Information Security Officer (AISO), solution architects, vendors, and CMS stakeholders, the consultant will lead security architecture reviews, data governance initiatives, risk assessments, and compliance activities across all MES modules and integrations. The role will ensure adherence to CMS ARC-AMPE, CMS MARS-E, HIPAA, NIST, IRS 1075, and State of Connecticut security standards while overseeing secure data exchanges, cloud security controls, identity and access management, encryption, incident response readiness, vulnerability management, and audit preparedness.

The consultant will also support CMS certification efforts, Operational Readiness Reviews, Security Authorization to Operate (ATO) documentation, SSA accreditation activities, and triennial audits. Additionally, this individual will evaluate AI-enabled solutions for compliance with organizational security requirements, assess algorithmic and operational risks, oversee application security testing activities including SAST, DAST, and SCA, and provide executive-level reporting on security posture, risk exposure, and remediation progress to ensure the secure and responsible operation of the Medicaid enterprise environment.