Privacy & Compliance Manager

Who is Saint Louis University? Founded in 1818, Saint Louis University is one of the nation's oldest and most prestigious Catholic universities. SLU, which also has a campus in Madrid, Spain, is recognized for world-class academics, life-changing research, compassionate health care, and a strong commitment to faith and service.

The Privacy & Compliance Manager supports the mission of the University by providing university-wide compliance support in the area of privacy and compliance.This position is responsible for the implementation of a privacy program, and day-to-day management and enforcement of policies, procedures, and initiatives related to privacy laws and regulations, including but not limited to the university's Privacy Policy and Policy on Protected Health Information Under the Health Insurance Portability and Accountability Act (HIPAA policy).Additionally, this position manages compliance-related trainings and supports the university's growing export controls compliance function.

• Ensures institutional compliance with applicable data privacy laws, regulations and industry best practices through periodic program review and assessment

• Serves as the Privacy and Data Protection Compliance Partner for the Enterprise Risk Management (ERM) Compliance Leadership Group and the Institutional Review Board (IRB)

• Develops, administers, and retains records related to education and training for employees who routinely handle sensitive data

• Conducts annual privacy risk assessments to identify areas where electronic protected health information resides; ensures that the appropriate human, physical and/or technical access controls are in place

• Participates on the university data governance committee, that includes data owners and stewards for all major campus data categories

• Reviews agreements and contracts when institutional data or privacy policies are impacted

• Provides community awareness information on privacy policies, programs, and pitfalls

• Participates in responses to any data breaches with ITS, Risk Management, and General Counsel

• Coordinates export control compliance (review travel logs, administer/monitor training) in partnership with the Chief Export Control Officer

• Collaborates with other departments, such as ITS, Risk Management, Compliance, Internal Audit, and General Counsel, to review and adjudicate incidents of privacy policy violations, understanding that this privacy role does not involve the practice of law, which is a function performed by Saint Louis University's Office of the General Counsel

• Performs other duties as assigned

• Strong knowledge of privacy practices and regulatory issues impacting privacy, research, and healthcare

• Strong project management skills

• Excellent verbal and written communications skills

• Strong presentations skills

• Strong data analysis skills

• Ability to respond to questions in both small and large group settings

• Ability to collaborate with multiple entities to plan and accomplish objectives

• Ability to lead or coordinate ongoing multiple, large, and complex projects from conception to completion

• Bachelor's degree in accounting, business management, information technology, statistics, or related field

• Five or more years of increasing responsibility in administrative work experience with privacy and data confidentiality compliance, or equivalent with preference given to experience in a HIPAA environment or data privacy management

• Knowledge and application of privacy and data confidentiality regulations pertinent to higher education including, but not limited to: FERPA, HIPAA, GDPR, state medical records privacy laws, and other privacy and data confidentiality related laws and standards

• Certification from an accredited certification program for privacy professionals or completed within 6 months of hire date

• Experience working in a higher education or similarly highly regulated environment

Function

Scheduled Weekly Hours:

Saint Louis University is an equal opportunity/affirmative action employer. All qualified candidates will receive consideration for the position applied for without regard to race, color, religion, sex, age, national origin, disability, marital status, sexual orientation, military/veteran status, gender identity, or other non-merit factors. We welcome and encourage applications from minorities, women, protected veterans, and individuals with disabilities (including disabled veterans). If accommodations are needed for completing the application and/or with the interviewing process, please contact Human Resources at 314-977-5847.