Healthcare Privacy & Security Policy Writer (HIPAA / NIST)
Job Description
OperAxis is hiring a Healthcare Privacy & Security Policy Writer for a public sector healthcare organization in Raleigh, NC. You'll research, draft and maintain clear, accurate and compliant policies and procedures covering information security, privacy practices, system governance and operational compliance. You'll work closely with subject matter experts, legal counsel, compliance officers, cybersecurity teams and executive leadership. A healthcare background is required. The role is onsite and open to local candidates only. Duration: 10 months, contract Requirements • 5+ years researching, drafting and updating privacy and security policies, procedures and guidance • Strong working knowledge of HIPAA, NIST frameworks and CMS requirements • 5+ years analyzing policies for gaps against regulatory and operational requirements • Experience translating technical and regulatory concepts into clear policy language • Version control, document tracking and standardized formatting for policy documents • Strong research, drafting and technical writing skills • Healthcare background required • Local to the Raleigh, NC area
Responsibilities
- Research, develop, draft and update policies, procedures, guidance documents and manuals for the privacy and security office
- Analyze existing policies to identify gaps, inconsistencies, redundancies or regulatory misalignment
- Ensure written materials meet federal, state and internal standards, including HIPAA, NIST and CMS
- Work with subject matter experts to gather information, validate accuracy and ensure clarity
- Translate complex technical, regulatory and operational concepts into clear policy language
- Establish and maintain version control, document tracking and standardized formatting
- Support communication of policy updates through summaries, presentations and training materials
- Align policy content with organizational strategy, legal obligations, operational workflows and statewide directives
- Collaborate with cross-functional teams so policies fit operational needs