Job Summary
Reporting to the District Director of Information Security, the Privacy Officer is responsible for overseeing and operationalizing the privacy program, focusing on strategically enabling the College to deliver on its objectives in an increasingly regulated privacy landscape. This position drives awareness and creates the tools, policies, and training needed to allow employees and partners to appropriately handle personal data as part of their business activities.
Primary Duties And Responsibilities
Essential Performance Requirements*
- Maintains a strategic and comprehensive privacy program that defines, develops, maintains, and implements policies and procedures that enable consistent, effective privacy practices that minimize risks and ensure the confidentiality of personal identity information (PII) and personal data across all media types
- Ensures privacy policies, standards, and procedures are adequately aligned with the latest privacy regulation (GDPR, CCPA, etc.) and establishes and administers a process for investigating and acting on privacy complaints
- Works with organization leaders to maintain governance for the privacy program in addition to providing leadership for external counsel, and consultants working to improve the TCC privacy program
- Works with the District Director of Information Security to ensure alignment between security and privacy compliance programs, including policies, practices, investigations, and acts as a liaison for all issues concerning privacy for the College
- Works with the District Director of Information Security to establish an ongoing process to track, investigate, and report inappropriate access and disclosure of PII
- Monitor patterns of inappropriate access of disclosures of PII
- Performs or oversees initial and periodic information privacy risk assessment/analysis, mitigation, and remediation
- Conducts related ongoing compliance monitoring activities in coordination with the College’s compliance and operational assessment functions and ensures that information technology and systems are engineered from a privacy-by-design framework
- Takes a lead role to ensure the organization has and maintains appropriate privacy and confidentiality consents, authorization forms, and information notices and materials reflecting current organization, legal practices and requirements
- Oversees, develops, and delivers initial and ongoing privacy training to the workforce
- Participates in the development, implementation, and ongoing compliance monitoring of all business associates and business associate agreements to ensure all privacy concerns, requirements, and responsibilities are addressed while working cooperatively with key stakeholders in the College and applicable organization units in overseeing privacy rights to inspect, amend, and restrict access to PII when appropriate
- Manages all required breach determination and notification processes required by applicable state and federal regulatory rules
- Provides direction, guidance, and support to all internal customers on privacy matters
Service Excellence
- Participates on behalf of the College in external community organizations and associations as assigned to support the essential performance requirements
- Attends the workplace regularly, reports to work punctually, and follows a work schedule to keep up with the demands of the worksite
- Completes all required training and professional development sessions sponsored through Tarrant County College (TCC)
- Supports the mission, values, goals, and principles of the College
Supervision
Works under the general supervision of the District Director of Information Security
- Performs Other Related Tasks as Required
The duties listed are intended only as illustrations of the various types of work that may be performed. The omission of specific statements of duties does not exclude them from the position if the work is similar, related or a logical assignment to the position. The job description does not constitute an employment agreement between the employer and employee and is subject to change by the employer as the needs of the employer and requirements of the job change.
Required Minimum Qualifications
- Bachelor’s Degree
- Five (5) years’ working experience related to the Essential Performance Requirements
- Current professional privacy certification from a recognized Privacy standards organization such as ISACA, ISC2, or IAPP
Preferred Qualifications
- Master’s degree
- At least one (1) year’s working experience leading privacy programs
- At least one (1) year’s working experience with NIST Privacy Framework or GAPP ISO 27701,
- At least one (1) year’s working experience with data inventory, classification, and mapping tools
Knowledge, Skills and Abilities
- Skilled in excellent customer service and interpersonal skills
- Ability to work effectively in a collaborative environment
- Ability to think critically to effectively solve and communicate problems in a fast-paced environment where the demands for work are varied, and unpredictable in scope and volume
- Ability to analyze data and provide sound recommendations based on policy, procedure, practice, and existing regulations
- Ability to delegate work appropriately to faculty and staff to meet College and campus deliverables
- Ability to use computer applications and enterprise systems, including proficiency with word processing, spreadsheet, and presentation software
Physical Demands and Work Environment
Physical Demands
The physical demands described here are representatives of those that must be met by an employee to successfully perform the essential functions of this job. While performing the duties of this job, the employee is frequently required to sit; use hands to finger, handle, or feel objects, tools, or controls; reach with hands and arms; and talk or hear. The employee is occasionally required to stand, walk, and climb or balance. The employee must occasionally lift and/or move up to 10 pounds. Specific vision abilities required by this job include close vision, distance vision, color vision, peripheral vision, depth perception, and the ability to adjust focus.
Work Environment
The work environment characteristics described here are representatives of those an employee encounters while performing the essential functions of this job. While performing the duties of this job, the employee occasionally works near moving mechanical parts and is occasionally exposed to risk of electrical shock. The noise level in the work environment is usually quiet.
Accommodations
Reasonable accommodations may be made to enable individuals with disabilities to perform the essential duties and responsibilities.
Special Instructions Summary Posted 12/13/2024
