• FLSA Status: Exempt
• Anticipated Salary Range: $107,000 to $120,000 depending on qualifications.
• Successful candidates must meet the minimum requirements for education, experience, knowledge, skills, and abilities for the position.

• Analytical and Problem-Solving: Strong analytical, investigative, and problem-solving skills, with the ability to analyze complex data, identify patterns and trends, make data-driven decisions, interpret regulations, and translate requirements into effective and practical operational solutions.
• Communication and Interpersonal: Strong written and verbal communication skills, with the ability to effectively engage stakeholders, legal teams, and external agencies and to foster collaboration, build partnerships, and achieve shared objectives.
• Organization and Planning: Demonstrated ability to develop strategies and objectives; prioritize and manage multiple tasks effectively; ensure accuracy in documentation and data; follow established procedures; and consistently deliver timely, high-quality work.
• Position Specific:
  • In-depth knowledge of the HIPAA Privacy, Security, and Breach Notification Rules and related healthcare privacy and data protection frameworks, with the ability to stay current on regulatory changes.
  • Knowledge of applicable federal and state privacy laws and requirements.
  • Strong negotiation skills with the ability to effectively work with vendors, business associates, and other entities handling healthcare data.
  • Demonstrated high ethical standards and sound judgment in protecting privacy and data security.
  • Proficiency in interpreting and applying federal and state regulations and organizational policies. Proficiency with Microsoft Office Suite (or similar tools) and experience reporting statistical data.
• Professionalism: Demonstrated integrity, sound judgment, and discretion. Ability to maintain confidentiality, treat others with respect and consideration, take accountability for actions, and follow through on commitments.

Bachelor’s degree and 5 years of related progressive experience.

• Advanced degree (e.g., J.D., MHA, MPH) from an accredited institution.
• Certified Information Privacy Professional (CIPP) or similar credential.
• Experience working in higher education, healthcare, government, or large, decentralized organizations.
• Experience reviewing or negotiating Business Associate Agreements and other privacy-related contractual terms.
• Knowledge of general higher education policy and practices and the ability to navigate complex institutional structures and processes.

• Policy Development and Implementation. Develops, updates, implements, and enforces policies and procedures governing the privacy of PHI to ensure ongoing compliance with HIPAA and related privacy regulations, accounting for evolving technology, business practices, and the regulatory environment.
• Regulatory Monitoring and Analysis. Monitors new and proposed legislation, regulatory developments, and industry best practices; evaluates institutional impact; and, in coordination with the Office of Legal Affairs and relevant stakeholders, recommends and implements necessary changes.
• Privacy Guidance. Provides authoritative guidance to university departments and leadership on privacy requirements, risk mitigation, and the appropriate use and disclosure of PHI; operationalizes processes to foster compliance with privacy-related laws, regulations, policies, and contractual obligations. Refers matters requiring legal interpretation to the Office of Legal Affairs.
• Business Associate Agreements. Reviews, negotiates, and maintains Business Associate Agreements (BAAs) and related contractual privacy provisions, coordinates with the Office of Legal Affairs and Office of Budget and Finance to ensure appropriate privacy protections with partners and vendors, and maintains the University’s template BAA.
• Training and Awareness. Develops and delivers training and awareness programs so that the workforce and affiliated personnel understand their responsibilities for safeguarding PHI and their privacy obligations.
• Privacy Risk and Impact Assessments. Conducts privacy risk and impact assessments for systems, software, vendors, and initiatives involving PHI, particularly during procurement of new technologies; identifies vulnerabilities and recommends corrective actions.
• Compliance Monitoring and Reviews. Establishes and performs ongoing compliance monitoring and periodic reviews to assess adherence to privacy requirements and to identify areas requiring corrective action.
• Investigations and Privacy Rights. Investigates complaints, incidents, and potential breaches involving PHI; develops strategies to resolve identified issues; and ensures that requests relating to individual privacy rights, including complaints, PHI access requests, opt-outs, and requests for an accounting of disclosures, are handled appropriately and efficiently.
• Breach and Incident Response. Coordinates breach response and required notifications; develops and implements incident response plans to address breaches or unauthorized disclosures of PHI promptly; and contributes privacy risk analysis to institutional and UT Dallas security incident response efforts.
• Cross-Functional Collaboration. Collaborates with Information Security, the Office of Legal Affairs, Human Resources, and other stakeholders, including UT Dallas compliance and privacy partners, to support data governance, vendor risk management, and a comprehensive approach to privacy and security.
• Performs other duties as assigned.
  
  

• Work is primarily sedentary and performed in a standard office environment.
• The noise level is quiet to moderate.
• Frequent use of standard office equipment, including a computer/laptop (keyboard, monitor, and mouse), printer, copier, calculator, and telephone (or virtual equivalent).
• Work environment includes frequent interruptions, with a moderate to high stress level.
• Frequent communication through a variety of methods and collaboration with multiple departments, as well as individuals and groups.
• Ability to remain stationary at a computer for extended periods.
• May be required to move about the office and travel moderate distances around campus to attend meetings and events.
• May require occasional after-hours response to incidents.

• Competitive Salary
• Tuition Benefits
• BCBS PPO Medical Insurance Options – including 100% paid employee medical coverage for full-time employees
• AD&D Insurance
• Dental & Vision Plan Options
• Long and short-term disability
• TRS Retirement Plan
• Fertility Benefits
• Paid time off

1. A cover letter that outlines how their education, experience, skills, and abilities specifically align to this position and
2. A resume.