Privacy Manager Mayor's Office of Data & Innovation

Salt Lake CountyA career with a purpose in the community you love!

Salt Lake County invites you to explore our exciting career opportunities. We seek highly enthusiastic individuals to enrich our County with your experience and talent. If you enjoy working in a team environment that is committed to changing the lives of its community please keep reading.

What it is like to work here:

At Salt Lake County our culture is woven into all aspects of our work and our employees lives from the way we treat each other to the way we support the community. To promote and foster a fun and healthy work environment we appreciate employees through great benefits a healthy work-life balance and room to grow and develop.

Surround yourself with:

Peers who are motivated to make a difference in the lives of those we serve. We serve Salt Lake County and envision a safe and beautiful place for all to live work and have fun. Salt Lake County is about connecting people and championing our community. Community is more than a place. Its our heart and service that bring us together.

We encourage a work-life balance:

Working for Salt Lake County is more than just a paycheck. A career with /Salt Lake County includes several benefits and perks. We support our employees with 12 Holidays up to 24 vacation days 12 sick days and one personal day every year.

Additional Benefits include:

• Retirement options for hybrid pension/401(k) or 401(k) only with a 10% contribution
• Medical coverage including a 100% county-paid premium option Dental and Vision coverage including coverage for adult designees
• Health Savings account with a county contribution up to $1200/year Flexible Spending Account
• 100% county-paid Long-Term Disability and Short-Term Disability option
• Professional Development including professional membership fees paid
• Tuition Reimbursement
• Plus: On-site medical clinic and gym; pet insurance auto and home insurance and discounts at County facilities.

For Benefits information Click HERE

To estimate how much your pay and benefits could be worth use our Total Rewards Estimator

JOB SUMMARY

Under the direction of the Director of Performance & Innovation the Privacy Manager serves as Salt Lake Countys Privacy Officer leading Countywide data privacy initiatives to ensure compliance with the Government Data Privacy Act (GDPA) and related requirements. The role develops and oversees a comprehensive privacy program promotes ethical and responsible data use and sharing and assesses privacy risks associated with new technologies legislative changes and data-sharing partnerships while balancing legal compliance with public transparency.

MINIMUM QUALIFICATIONS

Bachelors degree from an accredited college or university in Public Administration Public Policy Information Technology Law Cybersecurity or a closely related field plus three (3) years of professional experience in data privacy compliance risk management or data management OR an equivalent combination of related education and experience.

Must possess or be able to obtain a professional privacy certification (e.g. CIPP/US CIPT or CIPM) and complete privacy-related trainings/workshops offered by the Utah State Office of Data Privacy within one (1) year of addition to the required certification and training the candidate must be familiar with the GDPA and Utah Government Records Access and Management Act (GRAMA) requirements.

Due to the nature of this position the successful applicant must pass a required background check through fingerprinting and enrollment in the continuous RAP Back (Record of Arrest and Prosecution Back) program in accordance with current County Human Resources policy requirements.

ESSENTIAL FUNCTIONS

• Manages Countywide privacy functions and responsibilities in accordance with the Utah Government Data Privacy Act (GDPA).
• Establishes and maintains Countywide privacy policies standards procedures and templates to ensure compliance with federal and state laws (including GDPA GRAMA HIPAA PCI CJIS Compliance and other related data and privacy governance laws).
• Supports and coordinates responsible data sharing activities within the County and with external partners in alignment with applicable laws policies and standards.
• Prepares strategies and implementation plans to catalog County data identify high-risk processing activities and document data sharing selling and purchasing activities.
• Partners with agency data coordinators to ensure privacy transparency and ethical data use are systematically integrated into agency operations data sharing practices program evaluations and technology solutions.
• Designs and delivers privacy training programs for County employees to ensure compliance with the GDPA and to foster a culture of data stewardship.
• Establishes and manages Countywide processes to ensure privacy notices are issued and kept current for all programs and services that collect or use personal data including website privacy notices.
• Ensures third-party contracts include and enforce provisions requiring compliance with Utahs GDPA for any vendor with access to County personal data.
• Develops protocols for individual or legal guardians of an individual to request access amendments or corrections and data explanations upon request.
• Establishes guidelines and procedures to ensure the information of at-risk employees is protected.
• Performs regular audits of data handling practices and access controls to ensure adherence to the minimum necessary principle.
• Conducts and oversees Privacy Impact Assessments (PIA) for new systems programs or third-party vendor contracts to identify and mitigate privacy risks.
• Works closely with the Countys Records Officer to ensure appropriate records series data classifications and data retention schedules are maintained.
• Collaborates with Information Technology (IT) the IT Security Team and the Cyber Security Incident Response Team (CSIRT) to investigate document and remediate potential data breaches or unauthorized disclosures and coordinate breach notifications when required.
• Coordinates with various working groups under the Technology Advisory Board (TAB) to ensure privacy compliance.
• Monitors changes in state and federal privacy laws and provides recommendations to the Director Mayors Executive Team and the County regarding policy updates.
• Serves as a point of contact for public inquiries regarding how the County collects uses and protects resident data.

KNOWLEDGE SKILLS AND ABILITIES (KSA)

Knowledge of:

• Privacy and public-sector compliance laws and requirements including Utahs GDPA GRAMA HIPAA (as applicable) and related confidentiality standards with the ability to interpret and apply them in a local government context
• Privacy program governance and best practices including privacy-by-design principles risk management approaches and standard privacy frameworks (e.g. NIST Privacy Framework FIPPs and related technology and governance practices)
• Data governance and information management concepts including data inventories classification retention schedules access controls and the minimum necessary principle
• Third-party privacy compliance requirements including vendor due diligence contract privacy provisions breach notification requirements and accountability mechanisms

Skills and Abilities to:

• Lead and manage a Countywide privacy program including developing implementation roadmaps coordinating across departments and driving adoption of policies and procedures
• Draft and maintain privacy policies standards templates and notices including website and program-level privacy notices and individual rights request procedures
• Assess and mitigate privacy risk including conducting Privacy Impact Assessments (PIAs) auditing data-handling practices and recommending practical risk controls
• Design and deliver privacy training and awareness programs and communicate complex privacy requirements clearly to employees leadership and the public
• Support privacy incident response and investigations including documentation coordination with legal and cybersecurity teams remediation planning and follow-through

WORKING CONDITIONS AND PHYSICAL REQUIREMENTS

This position is eligible for a hybrid work arrangement with a combination of on-site and remote work based on operational needs and County policy. Work duties are typically performed in a general office setting sitting for long periods of time at a computer.