About Us

North Carolina State Government is one of the state’s largest employers, with over 76,000 employees all working toward a common goal: a safer and stronger North Carolina. We are a large organization comprised of various agencies, offices, and universities, each providing important public services. Eligible state employees are entitled to comprehensive benefits, including a variety of leave options, professional development opportunities, insurance, and more. To learn more about the benefits of being a North Carolina state employee, visit the N.C. Office of State Human Resources' website.

Description of Work

The Privacy & Security Lead will support the NC DHHS Privacy and Security Office for Rural Health Transformation initiatives by developing, implementing, and strengthening privacy, cybersecurity, information governance, and risk-management practices across rural healthcare environments. This role will help ensure that health information and technology systems are protected while enabling secure, equitable, and innovative delivery of healthcare services.

Key Responsibilities:

• Develop and implement privacy and security strategies aligned with Rural Health Transformation priorities.
• Assess cybersecurity, privacy, and technology risks across rural healthcare organizations, systems, and third-party partners.
• Support compliance with applicable federal, state and NC DHHS privacy and security requirements, including HIPAA and related healthcare regulations.
• Conduct security and privacy risk assessments and develop remediation plans for identified vulnerabilities and gaps.
• Strengthen identity and access management, data protection, incident response, business continuity, and cybersecurity awareness practices.
• Support secure implementation of digital health technologies, data-sharing capabilities, interoperability solutions, telehealth, and other technology-enabled rural health services.
• Develop and monitor security metrics, risk indicators, and program performance measures.
• Assist with incident response, breach preparedness, investigations, and required notifications.

Knowledge Skills and Abilities/Management Preferences

Salary Grade Range: $87,617.00 - $131,426.00 Recruitment Range: $87,617.00 - $120,474.00 Candidates now meet the minimum qualifications of a position if they meet the minimum education and experience listed on the vacancy announcement. The Knowledge, Skills, and Abilities (KSAs)/ Management Preferences are not required. Applicants who possess the following skills are preferred:

• Demonstrated experience developing and implementing privacy and security policies, procedures, and controls for health information, government programs, or other highly regulated environments.
• Experience conducting privacy and security risk assessments, including identifying risks, documenting findings, developing mitigation plans, and tracking remediation activities to completion.
• Knowledge of healthcare privacy and security requirements, including HIPAA Privacy and Security Rules, HITECH, data-sharing requirements, and applicable state and federal confidentiality requirements.
• Demonstrated ability to coordinate privacy and cybersecurity activities across multiple stakeholders, including state agencies, healthcare organizations, technology teams, vendors, and community/rural health partners.

Compensation and Benefits

The State of North Carolina offers excellent comprehensive benefits. Employees can participate in health insurance options, standard and supplemental retirement plans, and the NCFlex program (numerous high-quality, low-cost benefits on a pre-tax basis). Employees also receive paid vacation, sick, and community service leave. In addition, paid parental leave is available to eligible employees.

Application Process

Be sure to complete the application in its entirety. Resumes will not be accepted in lieu of completing this application. Information should be provided in the appropriate areas, to include the following: Education, including high school and all degrees obtained, Work Experience, and Certificates & Licenses. It is critical to our screening and salary determination process that applications contain comprehensive candidate information.