Duke University Job Descriptions
Duke Job Postings
To see if there are current openings for any of the job descriptions listed on this web site, please search Duke Jobs.
ASSOC DIR, INFORMATION PRIVACY
Job Title: ASSOC DIR, INFORMATION PRIVACY
Job Code: 2909
FLSA: E
Job Level: 16
Revised Date: 07/01/2019
Job Family: JF 28
Occupational Summary
The Associate Director, Information Privacy will assist the IT Risk Officer to minimize the university's privacy risk exposure through a scalable, risk-based, university-wide privacy program that proactively addresses risks in alignment with the institution's risk appetite.
Work Performed
Builds and maintains the university privacy framework; develop repeatable processes to identify and document covered framework activities and develop and deploy a risk-based, scaled-to-maturity plan for remaining framework activities in alignment with the institution's risk appetite; manage the Duke University privacy program to address in- scope activities; monitor and assess the evolving privacy landscape, and adjust program plan as appropriate.
Conduct risk-based privacy impact assessments of business processing activities to inform overall information risk management and promote privacy program maturity; identify and conduct privacy impact assessments when processing activities indicate higher risk to in-scope privacy-related interests and to address areas of emerging risks.
Lead advisory engagements including, but not limited to, business process documentation and assessment in support of information risk assessments and other collaborative information inventorying initiatives; revise and implement privacy policies, standards, procedures and guidelines with campus partners and impacted stakeholders.
Work collaboratively to develop strong working relationships with key business stakeholders within the institution and functional stakeholder in compliance, internal audit, records management, general counsel, and information security to support privacy compliance.
Maintain a working knowledge of all privacy and related policies across the institution and work with policy owners on needed modifications to help ensure codification of institutional standards and practices.
Remain current with generally-accepted interpretation of and enforcement landscape for all state, federal, and global privacy laws and regulations and emerging issues in the privacy and information risk space, monitor enforcement actions and translate trends into actionable recommendations for institutional consideration.
Serve as a privacy and data protection subject matter resource; provide guidance to internal clients, internal audits and compliance reviews and to campus partners, as requested and as applicable to issues related to privacy and data protection regulatory compliance.
Perform other related duties and manage other projects incidental to the work described herein.
Required Qualifications at this Level
Education/Training
Generally requires a bachelor's degree; Master's in a related field or JD desired.
Experience
Work requires at least 8 years work experience in privacy, higher education compliance, information asset management or another directly related field.
Skills
N/A
The intent of this job description is to provide a representative and level of the types of duties and responsibilities that will be required of positions given this title and shall not be construed as a declaration of the total of the specific duties and responsibilities of any particular position. Employees may be directed to perform job-related tasks other than those specifically presented in this description.
Duke University is an Affirmative Action/Equal Opportunity Employer committed to providing employment opportunity without regard to an individual's age, color, disability, gender, gender expression, gender identity, genetic information, national origin, race, religion, sex, sexual orientation, or veteran status.
Duke aspires to create a community built on collaboration, innovation, creativity, and belonging. Our collective success depends on the robust exchange of ideas-an exchange that is best when the rich diversity of our perspectives, backgrounds, and experiences flourishes. To achieve this exchange, it is essential that all members of the community feel secure and welcome, that the contributions of all individuals are respected, and that all voices are heard. All members of our community have a responsibility to uphold these values.
Essential Physical Job Functions
Certain jobs at Duke University and Duke University Health System may include essential job functions that require specific physical and/or mental abilities. Additional information and provision for requests for reasonable accommodation will be provided by each hiring department.
