Enterprise Engagement Lead Analyst

Overview

This role supports Enterprise Privacy & Security Risk Management (EPSRM) and other teams by translating complex regulatory, legislative, and contractual requirements into actionable, risk-informed analysis and advisory-ready outputs.

Working as part of a team of Lead Analysts, you will review and interpret contracts, laws, regulations, and industry frameworks to determine enterprise obligations related to privacy, security, artificial intelligence (AI) governance, and operational resilience.

The position operates in a Second Line of Defense (2LoD) advisory capacity, delivering high-quality analysis, requirement traceability, and executive-ready insights to enable stakeholder engagement and decision-making.

Responsibilities

• Analyze and interpret federal/state laws, regulations, and contractual obligations (e.g., state contracts, DPAs, security addenda) to identify requirements impacting operations, systems, and data; stay current on evolving regulatory landscapes (CMS, HIPAA, state programs, AI governance).
• Translate regulatory and contractual requirements into structured, enforceable, and testable obligations aligned to enterprise frameworks (e.g., NIST, CMS/MARSE/ARC-AMPE, NCQA), including development and maintenance of requirement inventories, mappings, and traceability artifacts linking controls, owners, and evidence.
• Perform impact assessments and support regulatory change management to evaluate the effect of new or changing requirements across business and technology environments; maintain regulatory tracking mechanisms and GRC inputs to support enterprise visibility.
• Serve as a core support partner to EEOs and enterprise stakeholders, providing risk-informed insights, recommendations, and updates on regulatory developments, compliance posture, and mitigation strategies.
• Develop executive-ready outputs (e.g., briefings, dashboards, summaries, risk analyses) to support decision-making and communicate complex requirements clearly and actionably.
• Support development of playbooks, templates, and standard operating procedures (SOPs); identify opportunities to enhance processes, tools, and analytical methods to drive consistency and efficiency.
• Perform other duties as assigned.
• Comply with all policies and standards.

Requirements

• Bachelor’s Degree in Information Security, Information Technology, Cybersecurity, Public Policy, Legal/Paralegal Studies, or related field; or equivalent experience required.
• 5+ years Privacy, security, compliance, risk management, or related field required.
• 5+ years analyzing regulatory, legislative, or contractual requirements required.
• 3+ years Healthcare, government programs (Medicare, Medicaid, Marketplace), or similarly highly regulated industries required.
• Experience producing executive-ready communications and advisory materials; ability to influence business and technical stakeholders without direct authority; support risk-informed decision-making within a Second Line of Defense (2LoD) advisory model in complex, cross-functional environments preferred.
• Experience applying healthcare regulatory frameworks (e.g., CMS, HIPAA, state Medicaid/Exchange requirements, NCQA) and security/privacy control frameworks (e.g., NIST 800-53, ISO 27001, CMS/MARSE/ARC-AMPE) within compliance, risk, or technology environments preferred.

Preferred Qualifications

• Master’s Degree preferred.
• Juris Doctor (JD) preferred.
• CISSP, CISM, CRISC, or similar information security or risk certification preferred.
• Privacy, AI Governance, or compliance-related certifications (e.g., CIPP, CIPM, AIGP, etc.) preferred.

Compensation & Benefits

• Pay Range: $87,700.00 - $157,800.00 per year
• Comprehensive benefits package including:
  • Health insurance
  • 401K and stock purchase plans
  • Tuition reimbursement
  • Paid time off plus holidays
  • Flexible approach to work with remote, hybrid, field, or office work schedules
• Actual pay will be adjusted based on an individual’s skills, experience, education, and other job-related factors permitted by law, including full-time or part-time status.
• Total compensation may also include additional forms of incentives.
• Benefits may be subject to program eligibility.

Equal Opportunity

Equal opportunity employer committed to diversity. All qualified applicants will receive consideration without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or other protected characteristic under applicable law.

Qualified applicants with arrest or conviction records will be considered in accordance with the LA County Ordinance and the California Fair Chance Act.