NCDHHS- PSO Privacy and Security Policy Writer

NC DHHS - Privacy and Security Office (PSO) requiring services for a Privacy and Security Policy Writer.

The Policy Writer for the DHHS Privacy and Security Office plays a critical role in developing and maintaining clear, accurate, and compliant policies that support the department s privacy, security, and regulatory obligations. This position researches, drafts, and updates policies and procedures related to information security, privacy practices, system governance, and operational compliance. The Policy Writer ensures alignment with state and federal requirements and collaborates closely with subject matter experts (SMEs), legal counsel, compliance officers, cybersecurity teams, and executive leadership. The ideal candidate must have health backgroud.

Required/Desired Skills

Skill	Required /Desired	Amount	of Experience
Research, develop, draft, and update policies, procedures, guidance documents, and manuals for the Privacy and Security Office	Required	5	Years
Analyze existing policies to identify gaps, inconsistencies, redundancies, or misalignment with regulatory or operational requirements.	Required	5	Years
Ensure written materials meet applicable fed. state & internal standards, including HIPAA, NIST frameworks,CMS requirements & DHHS enterprise policies	Required	5	Years
Work closely with SMEs to gather information, validate accuracy, and ensure clarity of content	Required	5	Years
Translate complex technical, regulatory, and operational concepts into clear, easy-to-understand policy language.	Required	5	Years
Establish and maintain version control, document tracking, and standardized formatting for all policy documents.	Required	5	Years
Support communication of policy updates, including summaries, presentations, and training materials for internal audiences.	Required	5	Years
Align policy content with organizational strategy, legal obligations, operational workflows, and statewide directives	Required	5	Years
Collaborate with cross functional teams to ensure policies align with organizational strategy and operational needs	Required	5	Years

Questions

No.	Question
Question1	Absences greater than two weeks MUST be approved by CAI management in advance, and contact information must be provided to CAI so that the resource can be reached during his or her absence. The Client has the right to dismiss the resource if he or she does not return to work by the agreed upon date. Do you accept this requirement?
Question2	All work must be completed on site. Do you accept this requirement?
Question3	Please list candidate's email address HERE that will be used when submitting E-RTR.
Question4	Please indicate how soon this candidate is available to start work. Vendors are encouraged to submit candidates that are available for the duration of the assignment.
Question5	Vendor must disclose to the agency if the candidate will be subcontracted at the time of submission. Do you accept this requirement?
Question6	Vendor must notify the agency if any portion of the requirements listed in this task order are to be outsourced to other countries. Do you accept this requirement?
Question7	Candidates submitted above the bill rate of $106.88 may not be considered. Do you accept this requirement?