Job Description & Details
This is a specialized contract role for a Senior Privacy and Security Policy Writer based in Raleigh, NC, where you will spend your days bridging the gap between complex legal mandates and practical operational workflows. If you know how to translate dense regulatory frameworks into clear, actionable guidelines without losing the technical nuance, this gig will let you directly shape the security posture of a major healthcare-adjacent organization. You will be the go-to translator for compliance, legal, and engineering teams, making sure everyone is playing by the same rulebook.
What You'll Actually Be Doing
You will spend a lot of your time knee-deep in policy documentation, auditing existing guidelines, and hunting down gaps where current practices don't quite match federal or state mandates. Expect to collaborate heavily with subject matter experts, cybersecurity leads, and legal counsel to draft, revise, and roll out system governance documents. The real challenge here isn't just writing—it's herding cats across cross-functional teams to gather accurate info, establishing bulletproof version control, and translating high-level cybersecurity jargon into plain English that actual employees can follow.
The Core Tech Stack
While you won't be writing production code, you absolutely must live and breathe HIPAA, NIST frameworks, and CMS requirements. A strong background in healthcare compliance is non-negotiable for this role because you will need to map technical controls and administrative safeguards directly to stringent medical privacy regulations. Mastery of document management systems, advanced version control, and structured policy repositories is essential to keep hundreds of pages of compliance documentation organized.
Interview Expectations
The hiring managers are going to want proof that you can take a massive, incomprehensible technical standard and distill it into a two-page policy that a nurse or a database admin can easily understand. They will likely ask you how you handle conflicting feedback from legal counsel and technical SMEs when drafting a new security procedure. They are secretly looking for diplomacy, a deep foundational knowledge of healthcare security frameworks, and concrete examples of how you manage document governance under tight regulatory deadlines.
Application Advice
To make your resume stick out to the ATS and the recruiter screening this role, make sure your experience with HIPAA and NIST is front and center—don't just list them, but highlight the actual policies, manuals, or governance documents you authored from scratch. Emphasize your healthcare background right away in your summary, and use keywords like 'regulatory compliance,' 'version control,' 'cross-functional collaboration,' and 'gap analysis' to ensure your application gets flagged as a strong match for this policy writer position.