Enterprise Engagement Lead Analyst
Core
Translates complex regulatory, legislative, and contractual requirements into actionable risk-informed analysis and advisory-ready outputs for Enterprise Privacy & Security Risk Management.
Role type
Second Line of Defense (2LoD) Enterprise Engagement Lead Analyst
Builds
Requirement inventories, mappings, traceability artifacts, executive briefings, dashboards, and standard operating procedures (SOPs)
Domain
Healthcare + Privacy, Security, and Compliance (GRC)
Required skills
Regulatory analysis, Contract interpretation, Impact assessment, Requirement traceability, Risk-informed decision support, Executive communication, Process improvement, Framework application (NIST, CMS, HIPAA), Stakeholder influence
Preferred skills
Healthcare regulatory frameworks (CMS, HIPAA, Medicaid), Security/privacy control frameworks (NIST 800-53, ISO 27001), AI governance, Executive advisory model experience, Playbook development
Technologies
NIST 800-53, ISO 27001, CMS/MARSE/ARC-AMPE, NCQA, HIPAA, Medicaid/Exchange requirements
Responsibilities
Analyze and interpret federal/state laws and contracts to identify operational requirements; Translate requirements into structured, testable obligations; Perform impact assessments for regulatory changes; Deliver risk-informed insights and executive-ready outputs; Support development of playbooks and SOPs; Influence cross-functional stakeholders to operationalize compliance.
Seniority
Senior, hands-on IC with advisory capacity
