Job Description

The manager, privacy programs report to the Institutional Compliance and Privacy Office and plays a critical role in supporting the institution's Enterprise Privacy Program through privacy consultation, investigations, risk assessments, compliance monitoring, workforce education, and emerging technology reviews. Under the direction of the Privacy Director, the manager, privacy programs provides operational leadership and subject matter expertise across healthcare, academic, research, and administrative environments. Successful individuals in this role will help promote a culture of privacy compliance, and ensure compliance with all applicable university policies, privacy laws, and regulations governing higher education, research, and healthcare.

Responsibilities

• Manage the day-to-day operations of the enterprise Privacy Program, providing oversight and direction across privacy consultations, investigations, compliance monitoring, risk assessments, and policy development.
• Oversee and direct the review and investigation of privacy incidents involving patient, student, research, and other confidential information, ensuring appropriate remediation, mitigation, and reporting.
• Analyze privacy trends and data metrics to drive continuous process improvements, mitigate privacy risks, and strengthen enterprise privacy controls.
• Serve as a privacy subject matter expert, providing authoritative guidance on HIPAA, FERPA, HITECH, research privacy requirements, AI, and applicable federal and state privacy laws and regulations.
• Partner strategically with faculty, researchers, clinicians, administrators, and operational leaders to proactively identify privacy risks and establish practical, scalable compliance solutions.
• Lead privacy consultation strategy regarding the application of HIPAA, FERPA, research privacy standards, enterprise policies and privacy-by-design principles to reviews involving artificial intelligence, machine learning, predictive analytics, generative AI, digital health tools, and other emerging technologies.
• Oversee privacy-focused risk assessments and reviews for technology implementations that utilize patient, student, research, or institutional information within vendor-provided technologies, software platforms, cloud-based solutions, and AI-enabled tools.
• Monitor and evaluate evolving federal and state laws, regulatory guidance, enforcement trends, industry frameworks, and best practices related to AI and privacy to ensure organizational readiness and compliance.
• Direct the development and delivery of comprehensive privacy training (in-person or virtual), educational resources, guidance documents, FAQs, newsletters, and awareness communications for workforce members, students, faculty, researchers, and institutional stakeholders.
• Lead the development, implementation, and maintenance of enterprise privacy policies, procedures, standards, and operational guidance.
• Drive and promote a strong culture of privacy awareness and compliance across the enterprise.
• Collaborate and align with Legal Affairs, Information Security, Human Resources, Internal Audit, Academic Affairs, Research Administration, and operational leadership to support and advance enterprise privacy objectives.
• Oversee/manage the Privacy Analysts of Privacy Programs.
• Other duites as assigned.

Qualifications

• Advanced knowledge of HIPAA, HITECH, FERPA, 42 CFR Part 2, research privacy requirements, AI, and applicable federal and state privacy laws, regulations, and industry standards governing the protection of sensitive data.
• Familiarity with NIST Privacy Framework, NIST AI Risk Management Framework, data governance principles, and emerging technology review processes.
• Strong understanding of privacy and data protection considerations associated with artificial intelligence (AI) and emerging technologies.
• Experience conducting privacy investigations, risk assessments, compliance reviews, and incident response activities involving healthcare, academic, and research data.
• Experience working with electronic health record systems and related information systems; experience with Epic is preferred.
• Excellent analytical, organizational, and problem-solving skills with the ability to evaluate information and identify risks while prioritizing competing demands.
• Strong verbal, written, and interpersonal communication skills, including the ability to develop reports, policies, educational materials, and awareness communications.
• Ability to effectively collaborate with executive leadership, faculty, researchers, clinicians, students, workforce members, operational departments, and external stakeholders.
• Demonstrated ability to take initiative, exercise sound judgment, and advance complex projects while providing responsive, solution-oriented support to stakeholders.
• Ability to commute to various UTHSA locations within a 50-mile radius of the University campus.
• Bachelor's degree is required.
• Industry-recognized AI certification required.

Benefits Overview

UT Health San Antonio offers an excellent benefits package for its employees. Employees who work at least 20 hours a week, with an appointment of at least 4.5 months, are eligible for benefits.

Medical - UT SELECT Medical insurance is offered free for employees and administered by Blue Cross and Blue Shield of Texas. Family members can be added to the plan through payroll deduction. Employees and their dependents can also receive discounted copays and coinsurance when using UT Health Physicians, a network of 800 premier physicians including more than 100 specialists. Employees receive $50,000 of group term life insurance and $50,000 of basic accidental death and dismemberment insurance for free, with options to purchase additional employee and dependent coverage for both at group rates.

Dental - Three dental insurance plan options are available for employees and their families through Delta Dental Insurance Company, two PPOs and one dental HMO plan. Both PPO plans allow employees to choose any licensed dentist.

Vision - Fully insured Vision Care benefits are offered by Superior Vision Services. Two vision plan options that offer either standard or enhanced vision benefits.

Disability - Employees can enroll in the Disability Insurance which provides income if a non-work related illness or injury prevents you from working.

FSAs - Employees can enroll in flexible spending accounts (FSAs) to set aside money from earnings before taxes for qualifying dependent day care expenses or out-of-pocket health care expenses.

Retirement - Employees are eligible for either the Teacher Retirement System (TRS) or the Optional Retirement Plan (ORP). TRS is a defined benefit retirement plan which UT Health matches employee contributions. ORP is for eligible faculty staff employees. Voluntary retirement programs are also available to invest before- or after-tax dollars with the choice of five quality retirement plan providers.

Time Off - A generous leave program offers multiple paid leave options:

• Front-loaded Paid Time Off: 128 to 208 hours (16 to 26 days) of Paid Time Off based on years of service, given at the start of each fiscal year. PTO may be prorated in year one based on date of hire.
• Extended Illness Bank: 8 hours (1 day) accrued per month which can be used for illness or injury after one day of Paid Time Off is taken.
• Paid Family Leave: Up to 240 hours (6 weeks) to care for a spouse, child, or parent after 6 months of consecutive employment.
• Holidays: 12 set paid holidays each year.

Discounts - Employees enjoy a range of discounts on services, tickets, and gym membership.