Logo
University of North Florida

Privacy Officer

University of North Florida, Jacksonville, Florida, United States, 32290


Nature of Work: The Privacy Officer reports to the Associate Vice President and Chief Compliance and Ethics Officer or above, provides leadership and guidance for a university department.

Typical Responsibilities: Reporting to the Associate Vice President and Chief Compliance and Ethics Officer, the Privacy Officer is responsible for the University's Privacy Program including but not limited to daily operations of the program, development, implementation, and maintenance of policies and procedures, monitoring program compliance, investigation and tracking of incidents and breaches and ensuring compliance with federal and state laws and University policies and procedures. During declared campus emergencies, this position may be required to perform specific job related duties at a designated off campus location or place of residence.

Required Qualifications: This position requires either (a) Master's degree from an acceptable accredited institution in a directly related area of specialization; (b) Bachelor's degree from an acceptable accredited institution in a directly related area of specialization and two years of experience directly related to the job functions; or (c ) 6 years of direct experience.

Builds a strategic and comprehensive Privacy Program that defines, develops, maintains and implements policies and processes that enable consistent, effective privacy practices which minimize risk and ensure the confidentiality of sensitive/confidential/personally identifiable information, paper and/or electronic, across all media types.Works with senior leadership and the Chief Compliance and Ethics Officer to establish governance for the privacy program.Serves in a leadership role for privacy compliance.Collaborates with the Chief Information Security Officer or designee to ensure alignment between security and privacy compliance programs including policies, practices, investigations, and acts as a liaison to the information systems department.Establishes, with the Chief Information Security Officer or designee, an ongoing process to track, investigate and report inappropriate access and disclosure of sensitive/confidential/personally identifiable information. Monitor patterns of inappropriate access and/or disclosure of such information.Performs or oversees initial and periodic information privacy risk assessment/ analysis, mitigation and remediation.Conducts related ongoing compliance monitoring activities in coordination with other compliance and operational assessment functions.Takes a lead role, to ensure the University has and maintains appropriate privacy and confidentiality consents, authorization forms and information notices and materials reflecting current organization and legal practices and requirements.Oversees, develops and delivers initial and ongoing privacy training to faculty, staff, and students.Establishes and administers a process for investigating and acting on privacy complaints.Performs required privacy breach risk assessment, documentation, and mitigation.Works with Human Resources to ensure consistent application of sanctions for privacy violations.Initiates, facilitates and promotes activities to foster information privacy awareness.Maintains current knowledge of applicable federal and state privacy laws and accreditation standards.Works with senior leadership, legal counsel, and other related parties to represent the University's information privacy interests with external parties (state or local government bodies).Serves as an information privacy resource on records requests both internal and external to the University (including public records requests).Serves as a resource to the Office of the Registrar on FERPA and other privacy-related matters.If designated, serves as the HIPAA Privacy Officer for the university.Provides expertise on compliance with international privacy obligations, including GDPR; serves as point of contact if designated.Cooperates with the Office of Civil Rights, other legal entities, and University officers in any privacy compliance reviews or investigations.

Departmental Requirements

Ability to develop and maintain recordkeeping systems and procedures.

Strong verbal and written communication skills and the ability to present information effectively to groups.

Skill in examining and re-engineering operations and procedures, formulating policy, and developing and implementing new strategies and procedures.

Knowledge of computerized information systems.

Strong analytical and critical thinking skills and the ability to analyze, summarize, and effectively present data.

Strong interpersonal skills and the ability to effectively work with a wide range of individuals and constituencies in a diverse community.

Excellent oral and written communications; Excellent organizational skills; Excellent interpersonal skills.

Excellent computer skills, including familiarity with Microsoft Office suites and databases.

Ability to record and edit training programs for distribution through a variety of methods.

Preferred Qualifications

Certified Information Privacy Professional designation is a plus. Membership and leadership in national privacy organizations are a plus. Familiarity with FERPA, HIPAA, and associated federal requirements; familiarity with international privacy laws and regulations are preferred. Experience working in higher education is preferred.

DepartmentUniversity Compliance

Compensation$70,000.00 to Negotiable Annual

Equal Opportunity

In 2020, the University of North Florida (UNF) received the prestigious INSIGHT Into Diversity magazine Higher Education Excellence in Diversity (HEED) Award, the only application-based national award for U.S. colleges and universities that exhibit an outstanding commitment to diversity and inclusion across their campuses. In addition, UNF ranked highest among the HEED institutions and was recognized as a 2020 Diversity Champion.

The University of North Florida (UNF) is committed to providing an inclusive and welcoming environment for all who interact in our community. In building this environment, we strive to attract students, faculty and staff from a variety of cultures, backgrounds and life experiences. The University of North Florida is an Equal Opportunity Employer and does not commit or permit discrimination or harassment on the basis of genetic information, race, color, religion, age, sex, disability, gender identity/expression, sexual orientation, marital status, national origin, or veteran status in any educational, employment, social, recreational program or activity that it offers. In addition, UNF will not commit or permit retaliation against an individual who reports discrimination or harassment or an individual who cooperates in an investigation of an alleged violation of university regulation.

Carnegie

UNF is a Carnegie Community Engaged Institution. This designation celebrates the University's collaboration with community partners from the local to the global level. It reflects UNF's mission to contribute to the public good and prepare educated, engaged citizens.

Statement(s) of Understanding

This position requires a background check. In conjunction with the University's policy, this position may also require a credit check.

The holder of this position is designated as a "Responsible Employee" pursuant to their role under Title IX. Therefore, the incumbent must promptly report allegations of sexual misconduct, sexual violence, and child sexual abuse by or against any student, employee, contractor, or visitor to the University's Title IX Administrator or any divisional Title IX Coordinator.

This position has been designated as a Campus Security Authority (CSA). This position has been designated as a CSA because it involves significant responsibility for student and campus activities and/or responsibility for campus security. As such, any person in this position must report to the University Police Department a crime or an incident that might be a crime that he/she becomes aware of. This position has a reporting requirement because the University believes that responsibility for students, campus activities and/or campus security will make the holder of this position someone members of the University community will see as an authority figure and someone to whom they can seek help. A CSA is not expected to investigate or determine whether a criminal incident actually took place. A CSA ' s responsibility is a duty to report. All positions designated as CSAs are required to complete an online or in - person training session. For more information concerning the training sessions or CSAs, please contact the University Police Department at (904) 620 - 2800 or the Office of the General Counsel at (904) 620-2828.