UIC Privacy Director

University of Illinois Chicago
United States, Illinois, Chicago
Jan 24, 2025
UIC Privacy Director UIC Privacy Director Hiring Department: Technology Solutions Location: Chicago, IL USA Requisition ID: 1029314 Posting Close Date: February 10, 2025 Salary: The budgeted salary range for the position is $100,000-$120,000. About the University of Illinois Chicago UIC is among the nation's preeminent urban public research universities, a Carnegie RU/VH research institution, and the largest university in Chicago. UIC serves over 34,000 students, comprising one of the most diverse student bodies in the nation and is designated as a Minority Serving Institution (MSI), an Asian American and Native American Pacific Islander Serving Institution (AANAPSI) and a Hispanic Serving Institution (HSI). Through its 16 colleges, UIC produces nationally and internationally recognized multidisciplinary academic programs in concert with civic, corporate and community partners worldwide, including a full complement of health sciences colleges. By emphasizing cutting-edge and transformational research along with a commitment to the success of all students, UIC embodies the dynamic, vibrant and engaged urban university. Recent "Best Colleges" rankings published by U.S. News & World Report, found UIC climbed up in its rankings among top public schools in the nation and among all national universities. UIC has over 300,000 alumni, and is one of the largest employers in the city of Chicago. Benefits eligible positions include a comprehensive benefits package which offers: Health, Dental, Vision, Life, Disability & AD&D insurance; a defined benefit pension plan; paid leaves such as Vacation, Holiday and Sick; tuition waivers for employees and dependents. Click for a complete list of Employee Benefits. Position Summary The UIC Privacy Director will lead the university's privacy program and compliance activities. The Privacy Director oversees ongoing activities related to the development, implementation, maintenance of, and adherence to the University's policies and procedures covering the privacy of, and access to personally identifiable information (PII), protected health information (PHI), research and FERPA data in compliance with federal and state laws. Position reports to UIC's Chief Privacy Officer (CPO). Duties & Responsibilities Develop and implement a strategic plan for the privacy program leveraging subject matter expertise, to ensure the university safeguards personal information and adheres to all applicable privacy regulations, including but not limited to research, FERPA, GDPR, HIPAA, PIPL, and other U.S. and global data protection laws. Manage UIC privacy team and operations. Lead the management and response of privacy incidents across University, units, hospital, and Healthcare Covered Components (HCCs). Partners with the Information Security team to investigate and report inappropriate access and disclosure of personal information. Ensure timely and thorough privacy incident investigations, with appropriate documentation and regulatory notifications, working in conjunction with FERPA and HIPAA officials as necessary. Report on privacy program performance, compliance status, and incident response activities to the UIC Chief Privacy Officer. Manage and perform initial and periodic privacy risk assessments and conducts related ongoing compliance monitoring activities in coordination with University, research, HCC compliance and operational assessment functions. Works with legal counsel and administration, key departments, and committees to maintain appropriate privacy and confidentiality consent, authorization forms, and information notices and materials reflecting current organization and legal practices and requirements. Serve as a liaison advising on privacy-related risks and initiatives to foster a strong privacy-centric culture across the University, units, and as needed with System Offices. Develop a comprehensive education and training program to ensure the UIC community has a foundational understanding of the privacy rights of individuals and their responsibilities and obligations as a member of the UIC community. Manage the University Privacy staff, students, and vendors to coordinate privacy efforts across all university units and HCCs. This includes developing and maintaining comprehensive privacy policies, frameworks, and risk management protocols that are tailored to the unique requirements and cultural contexts of each unit. Develop and implement a privacy by design (PbD) program with responsibility for student and personally identifiable information (PII) and protected health information (PHI) through the full data life cycle. Maintains current knowledge of applicable federal and state privacy laws and accreditation standards, and monitors advancements in information privacy technologies to ensure organizational adaptation and compliance. Perform other related duties and direct special projects as assigned. Minimum Qualifications Bachelor's Degree in either Computer Science, Health Information Management, Information Security, Health Informatics, Juris Doctorate or related field. 5+ years of higher education experience in a privacy and compliance-related discipline, or equivalent combination of education and experience. Must include experience drafting and implementing short and long-term program strategy including developing and implementing policies, programs, and procedures to guide university and units' privacy compliance initiatives. Must have ability to identify and assess privacy risks and navigate a decentralized environment and knowledge of the legislative process and the regulatory environment that influence higher education and R01 institutions. Demonstrated understanding of privacy frameworks and their applicability to higher education.. Ability to develop strategy and activities and milestones to support strategy. Ability to partner with a technology team to assess, recommend, and implement strategies to ensure data is accessible, reliable, and protected through the technology lifecycle. Strong critical thinking skills and analysis to solve problems. Effective communication skills with internal stakeholders, team members, peers, and leadership. Excellent written and verbal communication skills and interpersonal skills. Strong analytical and organizational skills, including demonstrated effective project, task, and time management skills. Demonstrated ability to respond and communicate with stakeholders during urgent situations and to create after-action plans and follow-ups. Ability to interpret and explain complex privacy regulations and translate legal and regulatory requirements into clear and effective communications, policies, processes, and practices. Willingness to engage on difficult issues and work with others with transparency and fairness. In-depth knowledge of privacy frameworks and best practices (e.g. GDPR, , FERPA, HIPAA). Proven track record of developing and leading comprehensive privacy programs in complex, global organizations. Preferred Qualifications 3+ years of experience with privacy risk rating and modeling. Experience conducting privacy risk-based compliance assessments and root cause analysis. Experience working directly with internal or external auditors and with committee structures and forming committees. Prior experience with management systems and business analysis activities. CIPP/US, CIPM or other relevant certification The University of Illinois System is an equal opportunity employer, including but not limited to disability and/or veteran status, and complies with all applicable state and federal employment mandates. Please visit Required Employment Notices and Posters to view our non-discrimination statement and find additional information about required background checks, sexual harassment/misconduct disclosures, and employment eligibility review through E-Verify. The university provides accommodations to applicants and employees. Request an Accommodation Looking for more University of Illinois positions? We invite you to search for positions at each of the University of Illinois locations, the University of Illinois System Office and the University of Illinois Foundation. The University of Illinois System Office supports the primary missions of teaching, research, public service, and economic development for all of the Universities and offers positions in all locations. The University of Illinois Foundation is the official fundraising and private gift-receiving agency for the University of Illinois and also offers position in all locations. Click the links below to search for other University of Illinois positions. University of Illinois Urbana-Champaign University of Illinois Springfield University of Illinois System Office University of Illinois Foundation The University of Illinois System is an equal opportunity employer, including but not limited to disability and/or veteran status, and complies with all applicable state and federal employment mandates. Please visit Required Employment Notices and Posters to view our non-discrimination statement and find additional information about required background checks, sexual harassment/misconduct disclosures, and employment eligibility review through E-Verify. To apply, visit https://uic.csod.com/ux/ats/careersite/1/home/requisition/14094?c=uic Copyright 2024 Jobelephant.com Inc. All rights reserved. Posted by the FREE value-added recruitment advertising agency jeid-c210a7367bade2429c4fb06338227e06