Posting Salary: Salary commensurate with experience.
Position Summary: Under the direction of the Director of Compliance, the Privacy Manager will design, develop, implement, administer and monitor a system-wide, comprehensive privacy program. The Privacy Manager is accountable for researching and serving as a subject matter expert on highly complex privacy issues, and for translating relevant state, federal regulations, and industry privacy standards (HIPAA, HITECH, FERPA, GDPR, CYBER, CHIMIA) into UC standards, policy, guidance, tools, best practices, and metrics, resulting in a system-wide privacy compliance program.
The Privacy Manager will lead system-wide privacy councils, including campus privacy, health care privacy and work closely with relevant other departments such as Information Technology, Information Security, Student Health, Research, OGC, Risk Services, and Internal Audit.
The Privacy Manager will be in charge of privacy related projects of diverse scope where analysis of data requires evaluation of identifiable factors in developing practices to ensure appropriate compliance communication, policies and procedures are implemented in the area of privacy. The Manager is expected to exercise judgment in selecting methods, techniques and evaluation criteria for obtaining results.
Responsible for conducting and documenting a wide range of assignments in an independent manner. Under the direction of the Director of Compliance, provides guidance in the area of Privacy to compliance, audit and other campus staff.
The Privacy Manager will be responsible for developing and managing privacy training, education and awareness, advising on best practices and potential system-wide or campus-specific risks. The Manager will be responsible for assisting campuses and relevant parties with responses to privacy breaches or incidents as appropriate within a system-wide framework of incident and breach management.
Special Conditions of Employment: Overtime Travel Travel outside of normal business hours
Other Special Conditions of Employment: Successful completion of a background check is required for appointment to this critical position.
Job Close Date: 3-18-2019
Duty 1: Manages system-wide privacy compliance program with applicable federal, state and international privacy statues and policies, identifies areas of system-wide risk and patterns of non-compliance for corrective actions. Coordinate with UC campus and medical center Privacy Officers to help assure UC policies, procedures, standards, guidance, tools, and training related to privacy issues are in the best interest of UC and meet state/federal laws and/or regulations related to privacy. Function:Systemwide Privacy Compliance Program Percent: 30
Duty 2: Supports UC locations in developing and implementing local policies, procedures, training, security measures and other areas related to privacy regulatory compliance. Assists in developing privacy risk assessments and supports related compliance monitoring activities. Function:Support to UC Locations Percent: 20
Duty 3: Assists locations in developing a compliance oversight program and facilitates the drafting and execution of, business associate agreements and data use agreements, to help ensure all privacy concerns, requirements and responsibilities are addressed when confidential information is shared with non-UC collaborators. Function:Location Compliance Oversight Program Percent: 20
Duty 4: Collaborates with location privacy officers to draft privacy compliance reports and provide periodic updates on privacy compliance activities by the SVP Chief Compliance and Audit Officer to Regents, Senior Leadership and/or Campus Leadership. Function:Collaboration Percent: 15
Duty 5: Coordinates with Campus Privacy Officials and Health Privacy Compliance staff to ensure that locations have established and are administering a process for receiving, documenting, tracking, investigating and taking action on privacy complaints, incidents, and breaches. Assures collaboration between privacy, security, and OGC concerning the organization. Function:Coordination Percent: 10
Duty 7: Keeps abreast of new and/or revised government privacy rules and regulations pertaining to individual privacy issues and recommends if new policies or modifications of policies/procedures are needed. Function:Applicable Privacy Regulations Percent: 5
Job Requirements Bachelor's degree in related area and / or equivalent experience / training.
Professional certification(s) or extensive experience applicable to job responsibilities.
Expert knowledge of the ethics, compliance and privacy theories and systems of internal control, and professional compliance and investigations standards.
Expert knowledge of University ethics and privacy compliance policies, procedures and programs. Demonstrated grasp of privacy and security concepts.
Applies sound principles and standards in completing highly complex and technical assignments.
Ability to gather, organize, analyze, and report on issues and recommendations that are complex in nature. Ability to apply policy and legal concepts to privacy issues.
Excellent interpersonal skills to work independently with all levels of University personnel, including management and faculty, and to facilitate agreement on issues and corrective actions.
Ability to communicate complex information to all levels of management and administrators in a clear and concise manner both written and verbal.
Excellent skills in complex decision making on critical issues.
Excellent skills in presenting information in a thorough and complete manner. Required
About us The University of California, one of the largest and most acclaimed institutions of higher learning in the world, is dedicated to excellence in teaching, research and public service. The University of California Office of the President is the corporate headquarters to the ten campuses, five medical centers and three Department of Energy National Labs and enrolls premier students from California, the nation and the world.
The University of California is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, age or protected veteran status.