Job Description: The Data Privacy Analyst will be a key member of the Information Security Office and assist in developing the privacy program at the university, including developing and implementing policies, procedures, and ensuring compliance with privacy regulations. The analyst will perform privacy assessments, participate in investigation of security and privacy events, and educate and promote privacy best practices in an effort to limit data collection, guard data from unauthorized access, and dispose of personal data that is no longer needed.
Southern Utah University's Information Security Office is part of the Information Technology department and is a centralized team of professionals meeting the needs of a growing campus. The Data Privacy Analyst is a newly created role. Our team is looking for an individual who is either eager to start their journey in privacy and data protection or who is ready to use their experience as a privacy professional to champion the implementation of a new privacy program in an academic setting.
The preference for this position is for the analyst to be on site, but hybrid options may be considered.
In the required cover letter, please address why you are interested in the position and what skills and experiences you can offer.
In the required references, please indicate if the reference can be contacted during the screening process.
The first date of consideration for this role is May 22, 2024.
Duties and Responsibilities: Develop, implement, and maintain privacy policies and procedures to safeguard personal information and ensure compliance with applicable privacy and cybersecurity regulations. Conduct privacy assessments to identify risks and ensure adherence to established compliance regulations, policies, and procedures. Provide guidance and support to university departments regarding privacy policies and best practices. Develop and deliver privacy training programs to promote awareness and understanding among university faculty, staff, and students. Respond to privacy and cybersecurity incidents and conduct investigations as necessary, ensuring appropriate mitigation and remediation actions are taken. Collaborate with IT and security teams to assess and enhance privacy controls for university systems and applications which would include performing Data Protection Impact Assessments, Vendor Privacy Assessments, and contract reviews. Research current and emerging privacy laws, regulations, and industry practices to provide expert advice and guidance. Engage with external stakeholders, such as regulatory bodies or legal representatives, to address privacy-related matters. Prepare and submit reports on privacy program effectiveness and compliance to senior leadership and relevant governing bodies. Other duties as assigned. Education Requirements: Bachelor's degree or equivalent combination of education and experience required Experience Requirements: Minimum of 1 year work experience in an IT, Risk, Legal, or relevant privacy field required Preferred experience in privacy management within an educational institution or similar environment Preferred experience conducting privacy impact assessments and developing privacy impact mitigation plans Preferred experience developing and implementing privacy policies and procedures Training/Skills Effective communication and interpersonal skills suitable for a diverse academic community Knowledge of fundamental privacy principles and preferred demonstration of implementing the principles in an organization Preferred ability to manage several projects simultaneously from design to implementation Preferred Certified Information Privacy Technologist/Professional/Manager (CIPT, CIPP, CIPM) certification or similar Preferred familiarity with data protection regulations specific to the education sector (FERPA, HIPAA, etc.) Documents: Resume Cover Letter Three personal references Job Posted by ApplicantPro
