OverviewThe Vice President of Compliance and Privacy is currently hiring for a
Privacy Program Manager. This position oversees the management, coordination, and assessment of the University's data-privacy activities, directing the University-wide privacy program in alignment with federal, state, and international privacy requirements and serves as Auburn University's HIPAA Privacy Officer. Collaborates with decentralized privacy functions to strengthen institutional privacy strategy, policies, best practices, and contractual safeguards; plans and delivers training programs; consults with departments to enhance internal processes and reduce risks associated with data-privacy incidents; and promotes a strong culture of data stewardship, accountability, and ethical compliance across the University.
Responsibilities- Supports the design, implementation, and ongoing maintenance of the University's data-privacy program, including policies, procedures, standards, and operational controls that protect personal and sensitive information across academic and administrative functions. Provides guidance on the development, implementation, and maintenance of University-wide privacy policies and procedures. Manages data-breach notification assessments and response activities in accordance with applicable state, federal, and international privacy laws. Reviews software and third-party vendor requests to ensure compliance with University data-privacy requirements and to confirm that contractual terms adequately safeguard University data and minimize institutional risk.
- Manages all activities related to the development, implementation, and maintenance of Auburn's HIPAA privacy program, including policies, procedures, and core documentation governing the confidentiality and protection of PHI. Conducts and documents recurring training for units with access to ePHI, audits Business Associate Agreements and related workflows, and ensures compliance with HIPAA, the HITECH Act, and applicable state laws.
- Supports administration of the University's Electronic Privacy Policy by providing e-discovery and electronic-preservation services to the Office of General Counsel, Division of Internal Audit, Research Integrity and Compliance, Athletics Compliance, and external counsel, in accordance with University policy and the Office of Audit, Compliance & Privacy Charter. Provides subject-matter expertise to the Office of General Counsel regarding the sequestering, securing, or preservation of data in response to litigation, subpoenas, investigations, and public-records requests.
- Serves as a resource to academic and administrative units by consulting on, evaluating, and remediating issues related to the confidentiality and protection of University records in both electronic and physical formats. Collaborates with stakeholders across the institution to support data-governance best practices, including appropriate data retention and deletion. Cultivates strong relationships with campus partners to strengthen the University's culture of compliance, ethics, and shared accountability. Provides clear, practical guidance consistent with applicable laws, regulations, and University policies.
- Maintains current knowledge of federal, state, and international privacy laws and regulations, including FERPA, HIPAA, GLBA, CCPA, GDPR, and other emerging privacy frameworks. Provides guidance to University stakeholders to ensure institutional compliance with evolving legal and regulatory requirements.
- Monitors organization-wide compliance with privacy laws and University policies, conducting audits to identify, document, and remediate compliance gaps. Evaluates whether required training, documentation, and operational processes are being maintained effectively and efficiently. Delivers data-privacy training as needed and recommends corrective actions to support adherence to privacy laws and to strengthen the University's overall compliance program in alignment with the U.S. Federal Sentencing Guidelines.
Qualifications- Bachelor's degree in Business, Law, Communication, Public Administration, or related field.
- 5 years of experience in privacy law, regulatory compliance, healthcare management, HIPAA, GDPR, research administration, auditing, legal services, organizational compliance, or a related field.
License and Certifications:
- Certified Compliance & Ethics Professional (CCEP) Upon Hire Required Or
- Certified Information Privacy Professional (CIPP)/US Upon Hire Required Or
- Certified Information Privacy Manager (CIPM) Upon Hire Required Or
Desired Qualifications:
- Experience in a higher-education environment-particularly interpreting and applying laws and regulations preferred.
- Juris Doctor (JD) preferred.
Contract TypeContinuing
