Job Description & Details
This is a heavy-hitting governance, risk, and compliance gig nested inside the North Carolina Department of Health and Human Services. You'll be acting as the frontline defense and privacy gatekeeper for massive public health initiatives, specifically wrangling the complexities of Medicaid and the RHTP framework. If you like untangling bureaucratic red tape while actually making sure protected health information doesn't leak, this one is worth a serious look.
What You'll Actually Be Doing
Expect to spend a good chunk of your week reviewing legal and procurement artifacts like RFPs, RFQs, MOUs, and MOAs to ensure privacy and security mandates are baked in from day one. You won't just be writing policies; you'll be actively performing NIST 800-53 Rev 5 risk assessments, evaluating third-party vendors, and embedding privacy-by-design principles into active technology and business initiatives across state health programs.
The Core Tech Stack
Your daily toolkit revolves heavily around the NIST family—specifically NIST SP 800-53, the NIST Cybersecurity Framework, and the NIST Privacy Framework. You also need a deep, working fluency with HIPAA Security and Privacy Rules, alongside the ability to translate federal and state mandates into actionable controls for technical and non-technical teams alike.
Interview Expectations
The hiring manager is going to test your ability to bridge the gap between rigid government compliance and fast-moving project delivery. They'll likely ask you to walk through a scenario where a vendor's data-sharing agreement completely misses a critical HIPAA requirement, and they'll be looking for you to explain not just how you'd flag it, but how you'd negotiate a fix without stalling the entire project. They also want to see real scars from executing NIST 800-53 Rev 5 assessments in the wild.
Application Advice
Your resume needs to scream public sector healthcare compliance. Make sure exact phrases like 'NIST SP 800-53 Rev 5', 'HIPAA Security Rule', and 'vendor risk management' appear naturally in your experience bullets. If you've previously worked with state HHS agencies or navigated massive healthcare transformations like RHTP, put those front and center to immediately clear the initial ATS filters.