Utah State University

University Privacy Officer (Compliance Officer III)

City Logan Campus
Posted Date 3 months ago(3/3/2022 6:44 PM)
Requisition ID
# of Openings
Job Locations
Category (Portal Searching)
Position Type
Benefited Full-Time
Job Classification
Percent of Time or Hours per Week
Legal Affairs
Vice President-Legal Affairs
Advertised Salary
Commensurate with experience, plus excellent benefits


The University Privacy Officer provides vision, strategy, coordination, and implementation for a comprehensive and cohesive approach to protecting private sensitive information across the University.


The University Privacy Officer (Compliance Officer III) serves in an oversight and coordinating role, in conjunction with key campus stakeholders and compliance owners (e.g., Information Technology, Registrar, Academic and Instructional Services, Human Resources, Institutional Review Board, Risk Management, Internal Audit Services, etc.) to implement an effective data privacy framework and program.


This position will report to the Chief Compliance Officer and is hybrid telework eligible within the state of Utah. Telework outside of the state of Utah is subject to review and approval by the University before a job offer is extended.


  • Develop, in consultation with University leadership and the Data Governance Steering Committee, a data privacy framework informed by universal privacy principles that uphold University values.
  • Oversee and serve as custodian for privacy-related policies and standards that apply to more than one unit and/or involve more than one type of data at the University.
  • Provide training related to university-level privacy policies that involve more than one type of data.
  • Serve as university-level HIPAA Privacy Officer:
    • Participate on the HIPAA Steering Committee;
    • Lead the HIPAA Working Group;
    • Coordinate the development and implementation of procedures necessary to comply with HIPAA at the university level and support the development and implementation of procedures within the
    • University’s designated Health Care Components (HCC);
    • Work in conjunction with HCC-designated privacy officers as necessary to implement the policies and procedures within their programs effectively.
  • Coordinate university-level notice of privacy practices, support development, and assist with the deployment of unit-level notices of privacy practices.
  • In collaboration with the Enterprise Systems & Security Manager and the Office of General Counsel, develop and implement procedures for responding to incidents involving the potential or actual exposure/disclosure of private sensitive or institutional information.
  • Provide oversight, management, and direction for investigations of potential or confirmed data breaches involving private sensitive information and make the final determination regarding the notification of individuals and outside parties for areas other than those under the authority of the Institutional Review Board.
  • Oversee information privacy assessments, analysis, mitigation, and remediation, as needed.
  • Participate in institution-wide risk analysis to ensure that privacy risks are properly managed.
  • In collaboration with Enterprise Systems & Security Manager and IT Services, maintain inventory of university-owned devices that store private sensitive information.
  • Advise colleagues on ways to balance the broad nature of privacy risk and harms against operational needs, including, without limitation, providing recommendations regarding best practices for business processes and appropriate use of software and other devices.
  • Initiate, facilitate, and promote activities to foster information privacy awareness within the university community.
  • Evaluate and make recommendations on agreements and contracts that involve the release or sharing of private sensitive information to third parties or external service providers.
  • Collaborate with Enterprise Systems & Security Manager to ensure that security and privacy concerns are aligned, and act as a liaison to the Information Technology’s Enterprise Systems and Security Team.
  • Represent USU concerning any Utah State Board of Higher Education initiatives pertaining to student or employee data privacy issues.
  • Maintain current knowledge of all applicable international, federal, and state privacy laws and ensure USU’s data privacy framework complies with these laws.
  • In conjunction with legal counsel, serve as the University's liaison with external authorities who may have a privacy-related inquiry or complaint, or who need to be informed about a potential or confirmed data breach for areas other than those under the authority of the Institutional Review Board.

The statements contained in this position description are not necessarily all-inclusive; additional duties may be assigned and requirements may vary from time to time.   


Minimum Qualifications:

  • Bachelor's degree with a minimum of 4 years of experience or master of science degree with 2 years’ experience within a compliance, legal, audit, and/or risk function, with recent experience in privacy compliance.
  • Demonstrated ability to work unsupervised, exercise leadership, and influence change.
  • Demonstrated organization, facilitation, written and oral communication, and presentation skills.
  • Well-developed professional and interpersonal skills; ability to interact effectively with people at all organizational levels of the University.
  • Working knowledge of state, federal, and international data privacy laws, including without limitation, HIPAA, FERPA, PPRA, GDPR, and PIPL.

Preferred Qualifications:

  • Certified Information Privacy Professional (CIPP), Certified Information Privacy Manager (CIPM), Certified Healthcare Privacy Compliance (CHPC), or other related certification(s).
  • Demonstrated knowledge of market practices in data privacy, including development and maintenance of data protection frameworks, privacy notification practices, and coordination with data owners and stewards concerning changes in diverse regulations and guidance.
  • Prior experience collaborating with multiple departments/units in a decentralized environment to meet the needs of various constituencies while also meeting the needs of the organization as a whole is strongly desired.


Fundamental Abilities:
Within the scope and complexity of each position’s responsibilities, each incumbent is expected to possess and demonstrate the following abilities:

  • Communication: Communicates effectively both verbally and in writing.
  • Problem solving: Analyzes information and evaluates results to select the best solution and solve problems.
  • Self-Monitoring: Measures performance of self; makes improvements and takes appropriate corrective action.
  • Critical Thinking: Comes to well-reasoned conclusions, solutions, and approaches to problems.
  • Team Building: Works to create a team-based environment. Consistently demonstrates cooperative behavior with colleagues, supervisors, and customers.
  • Active Listening: Gives full attention when others are speaking; listens to understand, asks questions as appropriate, and does not interrupt.
  • Service Orientation: Actively seeks opportunities to help others.
  • Conflict Resolution: Acts professionally when encountering customers who, at times, may be frustrated.


Core Characteristics:
As representatives of Utah State University and primary contributors to its mission, all employees are expected to demonstrate the following characteristics:

  • Take initiative.
  • Maintain confidentiality.
  • Be accountable.
  • Behave ethically.
  • Be honest and trustworthy.
  • Demonstrate a strong work ethic.
  • Be inquisitive.
  • Be detail oriented.
  • Be self-motivated.
  • Efficiently manage multiple tasks.
  • Be a team player.
  • Be committed to improving USU.

Required Documents

Along with the online application, please attach:

  1. Resume / CV to be uploaded at the beginning of your application in the Candidate Profile under “Resume/CV”
  2. Minimum five (5) professional references with contact information completed in the Candidate Profile.
  3. Cover Letter that describes how you meet the minimum and preferred qualifications for the position as well as your vision for the University Privacy Officer at an R1 land-grant university - to be typed/pasted at the end of your application.

**Document size may not exceed 10 MB.**

Advertised Salary

Commensurate with experience, plus excellent benefits


Employees work indoors and are protected from weather and/or contaminants, but not, necessarily, occasional temperature changes.  The employee is regularly required to sit and often uses repetitive hand motions.

University Highlights

Utah State University (USU) was founded in 1888 and is Utah’s land-grant and space-grant university. USU is one of only 146 research institutions in the U.S. classified as R1 “very high research activity” by the Carnegie Classification of Institutions of Higher Education. As one of the two premier research institutions in Utah, USU provides a high-quality education at an affordable price. With its main campus in Logan, the university serves approximately 27,500 students, including 24,255 undergraduates and 3,171 graduate students. USU Online has served students from all 50 states and 55 countries for 25 years.


USU’s statewide system features three residential campuses, 30 total campus locations, and 23 Extension education centers. The university employees 903 full-time faculty members, 124 executive administrators, and 1,649 full-time support staff. USU offers 115 undergraduate majors, as well as 91 master’s and 42 doctoral degrees. Learn more about USU.


A core characteristic of USU is engagement with communities and people in economic development, improvements to quality of life, and human capital. Through the practical application of knowledge, the University and its faculty engage and share expertise with the state, nation, and world, preserving the historical land-grant tradition of partnering with communities to address critical societal issues in the interest of the public good.


The USU main campus is located in beautiful Logan, Utah, a city of about 50,000 situated in a picturesque mountain valley about 80 miles north of Salt Lake City. Outstanding recreational opportunities abound in the nearby mountains and proximate region.


USU is sensitive to the needs of dual career couples and provides a Dual Career Assistance program to support careers for partners who are also seeking employment.


USU endeavors to provide reasonable accommodations to ensure equal access in all aspects of employment to qualified persons with disabilities. To request a reasonable accommodation for a disability, please contact the university’s ADA Coordinator in the Human Resource office at 435-797-0122 or submit a request at hr@usu.edu.


USU Land Acknowledgment

Please visit our website to learn about Utah State’s land acknowledgment of the eight tribes of Utah.


Notice of Non-discrimination

In its programs and activities, including in admissions and employment, Utah State University does not discriminate or tolerate discrimination, including harassment, based on race, color, religion, sex, national origin, age, genetic information, sexual orientation, gender identity or expression, disability, status as a protected veteran, or any other status protected by University policy, Title IX, or any other federal, state, or local law.

The following individuals have been designated to handle inquiries regarding the application of Title IX and its implementing regulations and/or USU’s non-discrimination policies:


Executive Director of the Office of Equity Matthew Pinner, discrimination@usu.edu, Old Main Rm. 161, 435-797-1266

Title IX Coordinator Hilary Renshaw, titleix@usu.edu, Old Main Rm. 161, 435-797-1266

For further information regarding non-discrimination, please visit https://equity.usu.edu/, or contact:

U.S. Department of Education, Office of Assistant Secretary for Civil Rights, 800-421-3481, OCR@ed.gov

U.S. Department of Education, Denver Regional Office, 303-844-5695, OCR.Denver@ed.gov


*updated 04/18/2022


Sorry the Share function is not working properly at this moment. Please refresh the page and try again later.
Share on your newsfeed