Enterprise Engagement Lead Analyst

Job summary

The Enterprise Engagement Lead Analyst translates complex regulatory and contractual requirements into actionable, risk-informed analysis for the Enterprise Privacy & Security Risk Management team. This role serves as a Second Line of Defense advisor, developing executive-ready insights and ensuring regulatory obligations are effectively operationalized across the enterprise.

Job details

Position Purpose: Supports Enterprise Privacy & Security Risk Management (EPSRM) and other teams across Centene by translating complex regulatory, legislative, and contractual requirements into actionable, risk-informed analysis and advisory-ready outputs, among other duties. Serves as a critical execution layer within the Privacy & Security Enterprise Engagement model, working as part of a team of Lead Analysts that support both Market Enterprise Engagement Officers (EEOs) and Shared Services EEOs. Reviews and interprets contracts, laws, regulations, and industry frameworks to determine Centene's obligations related to privacy, security, artificial intelligence (AI) governance, and operational resilience. Operating in a Second Line of Defense (2LoD) advisory capacity, this role enables EEOs to focus on stakeholder engagement and decision-making by delivering high-quality analysis, requirement traceability, and executive-ready insights. Applies deep subject matter expertise, operates with limited oversight, and influences cross-functional stakeholders to ensure regulatory and contractual requirements are effectively operationalized across the enterprise. Analyzes and interprets federal/state laws, regulations, and contractual obligations (e.g., state contracts, DPAs, security addenda) to identify requirements impacting operations, systems, and data, and maintain awareness of evolving regulatory landscapes (CMS, HIPAA, state programs, AI governance). Translates regulatory and contractual requirements into structured, enforceable, and testable obligations aligned to enterprise frameworks (e.g., NIST, CMS/MARSE/ARC-AMPE, NCQA), including development and maintenance of requirement inventories, mappings, and traceability artifacts linking controls, owners, and evidence. Performs impact assessments and support regulatory change management to evaluate the effect of new or changing requirements across business and technology environments, including maintaining regulatory tracking mechanisms and GRC inputs to support enterprise visibility. Acts as a core support partner to EEOs and enterprise stakeholders, delivering risk-informed insights, recommendations, and updates on regulatory developments, compliance posture, and mitigation strategies. Develops executive-ready outputs (e.g., briefings, dashboards, summaries, risk analyses) to support decision-making and communicate complex requirements in a clear, actionable manner. Supports the development of playbooks, templates, and standard operating procedures (SOPs), and identify opportunities to enhance processes, tools, and analytical methods to drive consistency and efficiency. Performs other duties as assigned. Complies with all policies and standards. Education/Experience: Bachelor's Degree Information Security, Information Technology, Cybersecurity, Public Policy, Legal/Paralegal Studies, or related field; or equivalent experience required. Master's Degree preferred. Juris Doctor (JD) preferred. 5+ years Privacy, security, compliance, risk management, or related field required. 5+ years Analyzing regulatory, legislative, or contractual requirements required. 3+ years Healthcare, government programs (Medicare, Medicaid, Marketplace), or similarly highly regulated industries required. Experience producing executive-ready communications and advisory materials, influencing business and technical stakeholders without direct authority, and supporting risk-informed decision-making within a Second Line of Defense (2LoD) advisory model in complex, cross-functional environments preferred. Experience applying healthcare regulatory frameworks (e.g., CMS, HIPAA, state Medicaid/Exchange requirements, NCQA) and security/privacy control frameworks (e.g., NIST 800-53, ISO 27001, CMS/MARSE/ARC-AMPE) within compliance, risk, or technology environments preferred. Licenses/Certifications: CISSP, CISM, CRISC, or similar information security or risk certification preferred. Privacy, AI Governance or compliance-related certifications (e.g., CIPP, CIPM, AIGP, etc.) preferred. Pay Range: $87,700.00 - $157,800.00 per year At Centene, we connect people to the care they need to live healthier lives — and the work you do here makes that impact real every day. You’ll take on meaningful challenges that directly support individuals, families, and communities, building your skills while making healthcare more accessible and effective. It’s work with a purpose you can see, backed by a team committed to improving lives well beyond the workday. Centene offers a comprehensive benefits package including: competitive pay, health insurance, 401K and stock purchase plans, tuition reimbursement, paid time off plus holidays, and a flexible approach to work with remote, hybrid, field or office work schedules. Actual pay will be adjusted based on an individual's skills, experience, education, and other job-related factors permitted by law, including full-time or part-time status. Total compensation may also include additional forms of incentives. Benefits may be subject to program eligibility. Centene is an equal opportunity employer that is committed to diversity, and values the ways in which we are different. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or other characteristic protected by applicable law. Qualified applicants with arrest or conviction records will be considered in accordance with the LA County Ordinance and the California Fair Chance Act

What you’ll do

The Enterprise Engagement Lead Analyst translates complex regulatory and contractual requirements into actionable, risk-informed analysis for the Enterprise Privacy & Security Risk Management team. This role serves as a Second Line of Defense advisor, developing executive-ready insights and ensuring regulatory obligations are effectively operationalized across the enterprise.

Requirements

Candidates must possess a Bachelor's degree and at least 5 years of experience in privacy, security, compliance, or risk management. Proficiency in healthcare regulatory frameworks and security control standards is required, along with experience in producing executive-level advisory materials.

Benefits

• Competitive pay • Health insurance • 401k • Stock purchase plans • Tuition reimbursement • Paid time off • Holidays

Listed skills

• Policy development · Preferred
• Regulatory Compliance · Preferred
• Data analysis · Preferred
• Risk Management · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Risk management
• Regulatory compliance
• Privacy
• Security
• Contract analysis
• AI governance
• Operational resilience
• Requirement traceability
• Stakeholder engagement
• Policy development
• Data analysis
• GRC
• Regulatory change management
• Strategic advisory
• Healthcare regulations
• Information security
• Quality Analysis
• Security Risk Management
• Regulatory Compliance Management
• Operational Resilience
• Compliance Risk Management
• Compliance Risk
• Time Off Management
• NIST 800-53
• Regulatory Frameworks
• Certified Information Privacy Professional
• Analytical Method
• Artificial Intelligence
• Dashboard
• Certified Information Systems Security Professional
• Certified Information Security Manager
• Decision Making
• Communication
• Information Technology
• Certified In Risk And Information Systems Control
• Cyber Security
• Standard Operating Procedure
• Governance
• Governance Risk Management And Compliance
• Health Insurance Portability And Accountability Act (HIPAA) Compliance
• ISO/IEC 27001
• Medicaid
• Medicare
• Operations
• Public Policies
• Stakeholder Engagement
• Testability
• Templates
• Mitigation
• Regulatory Developments

Job areas

• Security & Safety
• Healthcare
• Consulting
• Technology
• Legal
• Enterprise Analyst
• General ERP Analyst / Consultant
• Management and Organization Analysts
• Business Intelligence Analysts
• Data Scientists