Minimum Education and Experience Requirements:
- Advanced degree (master's or Juris Doctorate) with contemporary study of privacy, public records, cybersecurity, IT management, computer science, or related data governance or data management field.
- Three (3) years of experience and proficiency in information governance, compliance, risk analysis, security assessments, vulnerability analysis or other experience directly related to data privacy management.
Position Summary
The Data Privacy Manager's role is to design and develop the County's Data Privacy Program ("the Program") and to implement, oversee and enforce the Program's privacy policies and related procedures within departments under the County Executive. This role involves managing privacy risks, ensuring compliance with data protection laws and regulations, and leading efforts to safeguard personal data handled by various County departments.
This position reports to the Director of Performance and Analytics.
Position Duties
- Working closely with the senior leaders in the Office of the County Manager, the County's Department of Information Technology (DIT), the County Solicitor, the County's Right-to-Know Officer and key County departments (e.g. Human Services, Health, Kane, Jail, Emergency Services, Police, and Human Resources) and others, the Data Privacy Manager will develop and implement a data privacy program and plan, including policies and procedures, that will enable the County to protect the privacy of data assets within County departments in accordance with all relevant laws and regulations, including but not limited to the Health Insurance Portability and Accountability Act (HIPAA), the PA Criminal History Record Information Act (CHRIA), and the PA Right-To-Know Law (RTK).
- In collaboration with the County's Manager of Enterprise Data and Analytics, the Data Privacy Manager will ensure that data assets are managed in a manner that adheres to privacy and regulatory requirements.
- Monitor and test systems for compliance with policies, roles and data flows.
- Conduct privacy impact assessments and prioritize, resolve and monitor risks to the privacy of County data.
- Evaluate third-party vendors, including Artificial Intelligence (AI) vendors, for compliance with data privacy standards and negotiate data processing agreements.
- Review practices related to the County's open data program for compliance with data privacy policies and standards. The Data Privacy Manager will also participate in the review and approval process for proposed new open datasets to ensure protection of data privacy.
- Collaborate with DIT to ensure data privacy protection efforts are consistent with DIT's data security and risk management efforts.
- Recommend, develop, implement, and oversee corrective action and mitigation efforts to address deficient practices and improve privacy and confidentiality compliance.
- Track privacy breaches and work with DIT Office of Risk Management and the County Solicitor through closure.
- Provide expert advice and guidance on privacy to senior management, department directors and data managers and users throughout County government. The Data Privacy Manager will develop and execute data privacy training for County staff.
Knowledge, Skills and Abilities
Knowledge of:
- Privacy laws in the U.S. and Pennsylvania, particularly as they relate to Allegheny County government, and core concepts central to privacy management and data governance.
Skill in:
- Project planning and management techniques, tools and resources, including Microsoft Office programs, and any other related technology. Experience with data catalog software is a plus.
Ability to:
- Assume leadership and work independently.
- Work with committees or working groups effectively while coordinating activity toward a shared goal.
- Perform regulatory analysis, assess implications and provide multiple recommendations.
- Think strategically and identify proactive measures to strengthen the Program.
- Apply research and analysis, and evaluate programs.
- Demonstrate commitment to public service and improving the operations of government.
- Communicate effectively, both orally and in writing, with an ability to adapt approach, language and style to different audiences.
Hiring Requirements
Background, Real Estate Tax, Drug and Medical
Allegheny County employment policy requires that in order to receive a final offer of employment, candidates must successfully pass a background check, which includes verification of Allegheny County Real Estate Tax status, along with a drug test and medical examination/s as required for the position. In cases pre-employment drug/medical screening is required, testing be completed within 48 hours of the acceptance of the conditional offer of employment.
Residency
New hires are required to become a resident of Allegheny County within one (1) year of appointment.
Veterans' Preference
Will be awarded to eligible candidates where applicable.
