Director of Privacy Programs

The Office of Compliance at the University of Virginia seeks an individual to serve as the Director of Privacy Programs for the University's Academic Division. Reporting to the Assistant Vice President for Compliance, this new full-time position will develop and manage the Academic Division's overall privacy program and help ensure compliance with applicable privacy laws and regulations.

This will be a new position for the university. Currently the university has various individuals with responsibility for the multiple requirements related to privacy, but lacks an individual with a full-time focus or a deep understanding of how these various requirements align with each other.

The Director of Privacy Programs will be primarily responsible for:

• Maintaining current knowledge of applicable privacy laws, regulations, policies, accreditation standards, and best practices to monitor advancements in data privacy

• Working with key stakeholders to develop and implement privacy policies, procedures, and notices

• Confirming that appropriate privacy and confidentiality authorization forms, consents, notices of privacy practices, and other materials reflect current university practices and are consistent with legal requirements

• Developing privacy training materials and other communications to increase employee understanding of University privacy policies, data handling practices and procedures, and legal obligations

• Conducting on-going privacy training and awareness activities

• Investigating and resolving allegations of non-compliance with privacy policies

• Overseeing implementation of government regulations related to privacy

• Serving as the Data Protection Officer (DPO) for instances where legally required

• Ensuring institutional compliance with applicable data privacy laws, regulations, and industry best practices through periodic program review and assessment

• Participating on privacy-related university committees

• Identifying and developing initiatives to address and resolve areas of compliance concerns or emerging risks

• Cultivating relationships with peers and subject matter experts to facilitate proactive evaluation of new regulations, enforcement focus, or other compliance initiatives

• Maintaining a close working relationship with colleagues in areas including, but not limited to: Information Technology Services (ITS), University Counsel, Human Resources, Medical Center Compliance and Privacy, Sponsored Programs, Records and Information Management, and other departments as necessary to maintain an effective policy program

• Coordinating the review and maintenance of the University's HIPAA hybrid designation

• Working with ITS and Procurement Services to adopt standards and develop procedures for vendors with access to University data to confirm their compliance with the privacy and data security policies

• Participating, as needed, in responses to any data breaches

• Facilitating the University's missions of education, research, service and patient care in the context of compliance with privacy laws and regulations.

• Performing other duties as assigned to benefit the University's institutional compliance program

Qualifications:

• Master's degree and 10 years of relevant experience.

• Proven track record of implementing a privacy program across a major organization and translating legal, policy, and regulatory trends into leadership communication, operating practices, and institutional guidelines.

• Proven ability to effectively communicate privacy requirements to all levels of the institution, including University leadership, faculty, management, staff, and other community members.

• Ability to foster collaboration across University leaders and stakeholders. Holds employees accountable for individual results and drives overall effectiveness of pan-institutional efforts.

• Ability to act as the public face for privacy efforts, serving as a University leader, and participating in multi-faceted efforts across Grounds.

• Qualitative, analytical, writing and presentation skills

• CIPP/US certification is strongly preferred

This position is based in Charlottesville, VA in an office that operates on a hybrid work schedule, currently with two days per week in the office.

This is an Exempt level, benefited position. For more information on benefits, visit UVAbenefits.

Theanticipatedstart date is late 2024.

Anticipated hiring rangeis $130,000 - $140,000, commensurate with education and experience.

This position will remain open until filled.Review of Applicants will beginonSeptember 9, 2024.

This position will not sponsor applicants for work visas. The University will perform background checks on all new hires prior to employment.

To Apply:

Please apply throughtheUVA job boardandsearch for R0064273.Internal applicants must apply through their UVA Workday profile by searching 'Find Jobs'.

Complete an application online with the following documents:

• Resume

• Cover letter

Upload all materials into the resume submission field, multiple documents can besubmittedinto this one field. Alternatively, merge all documents into one PDF forsubmission.Applications that do notcontainalltherequireddocuments will not receive full consideration.

References will be completed via UVA's standardized process SkillSurvey.Five references will be requested via SkillSurvey during the final phase of the interview process.

For questions about the application process,please contact Ashley Cochran, Academic Recruitment Team Lead at alc6dk@virginia..

For more information about UVAandthe Charlottesville community pleasevisitUVA Charlottesville and BeyondandEmbark.

PHYSICAL DEMANDS: This is primarily a sedentary job involving extensive use of desktop computers. The job does occasionally require traveling some distance to attend meetings, and programs.

The University of Virginia, including the UVA Health System which represents the UVA Medical Center, Schools of Medicine and Nursing, UVA Physician's Group and the Claude Moore Health Sciences Library, are fundamentally committed to the diversity of our faculty and staff. We believe diversity is excellence expressing itself through every person's perspectives and lived experiences. We are equal opportunity and affirmative action employers. All qualified applicants will receive consideration for employment without regard to age, color, disability, gender identity or expression, marital status, national or ethnic origin, political affiliation, race, religion, sex, pregnancy, sexual orientation, veteran or military status, and family medical or genetic information.