Director, Privacy & Security, Enterprise Engagement

Responsibilities

• Lead the Privacy & Security Enterprise Engagement Officers (EEO) Shared Services Team
• Collaborate with other Shared Services across the organization with a focus on EPSRM
• Support the Enterprise Engagement Officer team
• Build trusted partnerships with Health Plan leadership and key enterprise stakeholders
• Align staffing and resources to shared service and line of business complexity
• Ensure the team’s alignment with defined goals
• Direct and oversee the team’s ongoing efforts to serve as a subject‐matter‐expert for privacy, security and AI requirements
• Provide Executive‐ready updates for Health Plan and EPSRM leadership
• Meet with regulators or other state representatives to answer questions
• Maintain a centralized requirements & deliverables register or pipeline mapping obligations to owners
• Ensure adequacy of control validation evidence

Requirements

• Minimum Education: Bachelor's degree in Information Security, Information Technology, Computer Science or other related field
• Master's degree preferred
• Licensure / Certifications: CISSP, CISM, CRISC, CGEIT or related advanced Risk or Security certification
• Minimum Experience: 8 years of experience with security capabilities, technologies, and architecture
• 5 years of experience in leading Business Information Security Officer (BISO), Technology Information Security Officer (TISO), or Technical Enterprise Engagement teams and engaging with executive leaders
• 3 years of experience with government sponsored health plan operations and associated regulatory and contractual requirements or similarly regulated industry
• 3+ years of supervisory/management experience

Hard Skills

• Information Security
• Information Technology
• Computer Science
• Security capabilities
• Security technologies
• Security architecture
• Privacy requirements
• AI requirements
• Control validation
• Risk management

Soft Skills

• Leadership
• Collaboration
• Partnership building
• Communication
• Executive reporting
• Team alignment
• Stakeholder engagement
• Supervisory skills
• Management skills
• Problem‐solving

Certifications & Qualifications

• CISSP
• CISM
• CRISC
• CGEIT

Industry Keywords

• Health Plan operations
• Regulatory requirements
• Contractual requirements
• Enterprise Engagement Officer
• Business Information Security Officer
• Technology Information Security Officer
• Shared Services
• EPSRM
• Risk management
• Compliance

Tools & Technologies

• Centralized requirements register
• Deliverables pipeline
• Health Plan systems
• Regulatory compliance tools
• Risk management frameworks
• Security frameworks
• Governance frameworks
• Data protection tools
• Incident response tools
• Audit management tools