Steven Palmer

At Blue Cross Blue Shield of Michigan, I manage vendor risk assessments and document findings for internal stakeholders. I review security reports and certifications, including SOC, HITRUST, ISO 27001, HIPAA, NIST, and PCI DSS materials.

I assign findings to stakeholders and risk owners, then facilitate remediation and mitigation projects. I also work with procurement, business units, vendor compliance, and enterprise compliance to align risk strategies and maintain regulatory standards.

At DENCAP Dental Plans, Inc, I managed IT vendors and vendor risk, and implemented a Vendor Risk Management program and Contract Management System. I also oversaw security audits and supported the company’s HIPAA, PCI, and EHR/EMR privacy training and compliance programs.

As Interim Director of Business Development at DENCAP Dental Plans, Inc., I launched a Business Development department and helped move agent, customer, provider, and staff paperwork to digital processes. I also created new communication channels for internal staff, agents, groups, and beneficiaries.