Director Of Privacy Technology Services University

Profile

Director Of Privacy Technology Services University
The candidate will develop and maintain the university’s privacy policies and procedures, facilitate data governance activities, and will partner with university leadership to ensure that the university adheres to sound and effective privacy practices. Will report to the Chief Privacy and Security Officer (CPSO) and will have responsibility over all Privacy related policies and procedures for the university and will partner with the HIPAA privacy officials for any HIPAA privacy issues. Serves as University’s privacy subject matter expert (SME). Builds collaborative relationships across the university to work toward privacy, IT policy and data governance goals. Identifies privacy-related risks and establishes operational practices and procedures to reduce them. Develops methodology and practices for privacy impact assessments and Privacy-By-Design principles. Implements, and maintains privacy policies and procedures for the university and continually ensures that the university’s policies and procedures comply with applicable laws and regulations. Understands existing sources of data used by the university, ensures that data in the university’s possession is acquired and used legally and consistently with any restrictions associated with its acquisition. Identification and development of unified controls meeting multiple regulatory and policy requirements. Exercises independent authority and joint authority with other assurance officers (chief information security officer, chief compliance officer, internal audit, director of university policies, etc.) to develop an environment and foster a culture supporting a high-level of security, compliance, and ethics in university activities. Engages stakeholders across the university to develop effective privacy partnerships and privacy engagement. Participates in group planning, deliberations, and decisions related to common policies, procedures, and processes; with the group, issues instructions for and facilitates appropriate deployment of new systems and changes in existing systems, in support of these goals. Manages and oversees the development and execution of privacy process across the organization. Develops corrective action plans for identified compliance issues and collaborates with operational teams to implement and maintain any required safeguards and remedial measures. Keeps relevant business leaders and associates informed of industry trends and updates on data privacy issues and topics. Participates in new business initiatives and product development activities to promote and implement functionality necessary to support required compliance capabilities. Serves as an external point of contact regarding the university’s data practices and compliance procedures. Develops and manages privacy training, education, and awareness for students, faculty, and staff. Advises and counsels campus constituents on best practices, new technologies, privacy complaints, and potential institution wide risks. Partners with the Chief Privacy & Security Officer to create comprehensive incident response plans in the event of an unauthorized disclosure of personal information. Leads and facilitates formal administrative process for university privacy breaches or incidents. In partnership with Security, Compliance, Legal and other groups across campus, creation and execution of operational programs to implement Privacy activities and initiatives. Manages, mentors and coaches a high performing team. Oversees budgets and ensures efficient operational execution. Provides regular reporting to stakeholders. Participates on unit, university or external committees. Networks with university and industry partners. Bachelor's degree are required. 5 years of prior experience working in a leadership role in a compliance, legal, audit, security, or data management function are required. Experience supervising and developing people are required. Customer engagement / customer service experience are required. Juris Doctorate or Master's degree are required. Experience creating and managing a Privacy program are required. Experience and working knowledge of IT Security frameworks (ex: NIST 800, PCI-DSS) are required. 3 +more years of prior work experience in a higher education environment are required. Certified Information Privacy Professional (CIPP) or Certified Information Privacy Professional/Information Technology (CIPP/IT). Knowledge and understanding of privacy and security regulations and best practices, including federal, state, international laws, policies and standards are required. Proven record of identifying the need for, developing, and enforcing realistic compliance methods from a risk/benefit analysis standpoint are required. Demonstrated ability to carry out extremely complex initiatives requiring expert knowledge of key business principles and practices are required. Extensive background and participation in collaborative leadership activities in a higher education (or similar) environment with demonstrated results of appropriate and effective business strategies and goals being reached are required. Demonstrated leadership and management skills are required. Demonstrated knowledge and skills in program and project management and analysis, negotiation and conflict resolution are required. Demonstrated strong effective communication ability in presentation and advanced writing skills including reflecting sensitivity to tone, audience and organizational politic are required. Ability to communicate highly-technical matters effectively to non-technical audiences in public or private forums, across a spectrum of groups, from senior leadership to middle management and staff, demonstrating the ability to clearly define a problem/issue, succinctly describe current status, analyze data and draft reports, presentations and other materials are required. Demonstrates the ability to use active listening skills, oral communication skills to speak effectively and demonstrates outstanding writing skills via email, letters and in person to teams and customers are required. Demonstrated understanding of policies and procedures, best practices and management of incident response. Demonstrated understanding and experience developing and implementing organization-wide user education and awareness programs are required. Demonstrated understanding of client relationship management, process mapping and improvement, project management and production support are required.

Company info

Sign Up Now - WashingtondcCrossing.com