Privacy and Security Policy Writer

HonorVet Technologies. We're a Service Disable Veteran-Owned IT staffing firm, ISO 9001 and ISO 27001 certified, working with federal agencies, state governments, and Fortune 500 enterprise clients across the US. What makes us different isn't a tagline; it's the way we work. We don't forward resumes and hope for the best. We take the time to understand where a professional like you is headed and only reach out when we genuinely believe there's a fit worth exploring.

Job Title: Privacy and Security Policy Writer
Location: Raleigh, North Carolina, 27607
Duration: 9 months with Possible Extension
Working Mode: Hybrid/Contract
 
Job Summary
Client is seeking an experienced Privacy and Security Policy Writer with a healthcare background to develop, review, maintain, and update policies, procedures, and standards supporting the department's privacy, information security, and regulatory compliance requirements.
The ideal candidate will have experience working in healthcare, public health, healthcare IT, or a health and human services environment, with a strong understanding of healthcare privacy regulations, information security practices, and policy development. This individual will collaborate with subject-matter experts (SMEs), legal counsel, compliance officers, cybersecurity teams, and executive leadership to ensure policies are clear, accurate, actionable, and aligned with applicable state and
federal requirements.
 
Key Responsibilities

• Research, draft, review, and maintain privacy, information security, data protection, and system governance policies and procedures.
• Ensure policies align with applicable healthcare regulations, state and federal laws, and organizational standards.
• Support compliance with HIPAA Privacy, Security, and Breach Notification Rules, as applicable.
• Collaborate with healthcare, IT, cybersecurity, legal, risk management, and compliance teams to gather requirements and validate policy content.
• Translate complex regulatory and technical requirements into clear, practical policies, standards, procedures, and guidelines.
• Review existing policies to identify gaps, inconsistencies, outdated content, and opportunities for improvement.
• Maintain policy documentation, version control, approval records, review schedules, and change histories.
• Support privacy and security risk assessments, audits, compliance reviews, and corrective action initiatives.
• Document policy requirements related to access controls, data confidentiality, information sharing, incident response, and records management.
• Facilitate stakeholder reviews and incorporate feedback from SMEs and leadership.
• Track regulatory changes and recommend policy updates to maintain ongoing compliance.
• Develop policy summaries, implementation guidance, and supporting documentation for employees and stakeholders.

 
Required Qualifications

• Bachelor’s degree in healthcare administration, Health Information Management, Information Systems, Public Health, Cybersecurity, Business Administration, or a related field.
• Demonstrated experience in policy writing, policy development, technical writing, compliance documentation, or regulatory documentation.
• Healthcare experience is required, preferably in healthcare administration, public health, healthcare IT, health information management, Medicaid, or a state health and human services agency.
• Strong understanding of healthcare privacy, confidentiality, information security, and regulatory compliance requirements.
• Familiarity with HIPAA, including applicable Privacy and Security Rules.
• Experience translating regulatory, legal, and technical requirements into formal policies and procedures.
• Excellent research, analytical, writing, editing, and documentation skills.
• Ability to work collaboratively with technical and nontechnical stakeholders.
• Strong organizational skills and attention to detail, with the ability to manage multiple policy documents and deadlines.
• Ability to handle confidential and sensitive information appropriately.
• Preferred Qualifications
• Experience working with a state government agency, particularly a health and human services department.
• Knowledge of HITECH, NIST security and privacy frameworks, and other relevant compliance standards.
• Experience supporting privacy and security governance, risk assessments, audits, or compliance programs.
• Familiarity with Medicaid, public health programs, electronic health records (EHRs), and healthcare information systems.
• Experience maintaining policy libraries, document management systems, and formal policy approval workflows.
• Relevant certifications such as Certified in Healthcare Privacy and Security (CHPS), Certified Information Privacy Professional (CIPP), or Certified Information Systems Security Professional (CISSP) are a plus, depending on the candidate's background.

 
Key Skills

• Healthcare Privacy and Security
• HIPAA Compliance
• Policy and Procedure Development
• Regulatory Research and Interpretation
• Healthcare Compliance Documentation
• Information Security Governance
• Risk Management and Audit Support
• Technical and Business Writing
• Stakeholder Management
• Document Control and Version Management

If you are interested, feel free to reach out to me directly at amanpreet.singh@honorvet.com