Job Summary
This position is responsible for privacy policy development and maintenance; auditing; monitoring compliance with University privacy policy and applicable law; and coordinating investigation and reporting of privacy incidents. The position will assist in the design of privacy policy education training and awareness activities.
Responsibilities
Essential Functions 1. Conducts investigations related to information privacy and security incidents. Clearly and accurately documents investigation findings analyses and response activities. 2. Takes appropriate steps to respond to and report violations of applicable policy and privacy laws. 3. Conducts privacy compliance audits and prepares written and oral reports on these audits for leadership. 4. Coordinates the implementation of Business Associate Agreements and other relevant data access agreements. 5. Develops and presents training materials related to information privacy and security topics. 6. Promotes information privacy and security awareness through multiple platforms. 7. Supports patients staff faculty and students by responding to questions providing guidance and facilitating issue resolution. 8. Participates on strategic project teams to develop and implement improvements related to information privacy. 9. Develops and maintains privacy policies procedures and guidelines based on best practices compliance requirements and operational needs. 10. Maintains current knowledge of privacy laws and trends. Analyzes the need for updates to policies processes or guidance due to emerging issues. Disclaimer This job description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties responsibilities and qualifications required of employees assigned to the job. Work Environment and Level of Frequency typically required Office environment. Some telecommuting available/required. Physical Requirements and Level of Frequency that may be required Nearly Continuously: Sitting hearing listening talking. Often: Repetitive hand motion (such as typing) walking. Seldom: Bending reaching overhead.
Minimum Qualifications
Bachelors degree in Business Public Administration Healthcare Administration Information Systems Management or a related field or equivalency (one year of education can be substituted for two years of related work experience) is required; and five years of progressive experience in computing privacy and information security including experience with internet technology and privacy and security issues.
Required Experience:
IC