Privacy Analyst

The University of Arizona, a leading public research institution committed to excellence in education and discovery, seeks a dedicated and detail-oriented Privacy Analyst to play a vital role in safeguarding the privacy and security of sensitive information. Reporting to the Chief Audit Executive, the Privacy Analyst will contribute to the ongoing development, implementation, and maintenance of the University's comprehensive privacy program. This crucial role ensures the protection of personal, financial, educational, and protected health information, aligning with all applicable federal, state, and global privacy laws, as well as University policies and best practices.

The Privacy Analyst will collaborate closely with Information Technology, University Compliance, and other key stakeholders to address privacy considerations across the institution. This position is instrumental in coordinating privacy risk assessments, conducting compliance monitoring activities, and fostering a culture of privacy awareness throughout the University and its related entities. The Privacy Analyst will also contribute to the review and updating of privacy policies and practices, provide guidance on third-party data sharing agreements, and support privacy incident response efforts. This is an exceptional opportunity to contribute to the University's commitment to responsible data management and the protection of its community.

Outstanding UA benefits include health, dental, and vision insurance plans; life insurance and disability programs; paid vacation, sick leave, and holidays; UA/ASU/NAU tuition reduction for the employee and qualified family members; retirement plans; access to UA recreation and cultural activities; and more!

The University of Arizona has been recognized for our innovative work-life programs. For more information about working at the University of Arizona and relocations services, please click here.

Privacy Risk & Compliance Monitoring:

• Coordinates initial and periodic privacy risk assessments
  and conducts related ongoing compliance monitoring activities in coordination
  with the university's other compliance and operational assessment functions.
• Ensures policies and practices are regularly reviewed and
  updated in keeping with changes in legal requirements and University
  operations.
• Coordinates privacy impact assessments (PIAs) for new
  systems, technologies, and business processes.
• Conducts regular reviews of systems and processes to
  ensure compliance with internal privacy policies and external legal
  requirements.

Collaboration & Stakeholder Engagement:

• Works collaboratively with Information Technology,
  University Compliance, and other stakeholders on areas with significant privacy
  components.
• Provides advice on third-party data sharing agreements
  and other third-party activities to address privacy-related matters and/or
  concerns.
• Engages with administrative units to integrate privacy
  considerations into institutional policies, programs, and projects.

Incident Response & Remediation:

• Supports privacy incident response activities, including
  incident documentation, investigation, and remediation.
• Prepares and presents privacy compliance reports to
  senior management.

Awareness & Training:

• Initiates, facilitates, and promotes activities to foster
  information privacy and compliance awareness within the organization and
  related entities.
• Maintains current knowledge of applicable federal, state,
  and international privacy and other compliance-related laws and accreditation
  standards.

Other additional duties and responsibilities as assigned.

KNOWLEDGE, SKILLS, AND ABILITIES:

• Strong knowledge of privacy laws (e.g., GDPR, HIPAA) and compliance standards.
• Expertise in privacy risk assessments and compliance monitoring.
• Ability to collaborate with stakeholders on privacy matters.
• Strong communication skills for articulating privacy risks and policies.
• Ability to develop and enforce privacy policies.
• Ability to meticulously review contracts and data access requests for privacy compliance.

• Bachelor's degree or equivalent advanced learning attained through professional level experience required.
• Minimum of 5 years of experience in information security, data privacy, and/or compliance.
• Or equivalent combination of education and work experience.

• International Association of Privacy Professionals (IAPP) certification preferred.