County Privacy Officer
Clackamas County
Get a reply from this employer
Your resume and cover letter, tailored to exactly what they’re hiring for.
Benefits offered by this job
Job summary
Clackamas County seeks a strategic County Privacy Officer to lead the enterprise privacy program, translate complex regulations into practical policies, and coordinate responses to privacy incidents across departments. The role requires healthcare privacy expertise and strong analytical skills to guide leadership decisions.
The successful candidate will shape privacy governance, develop metrics, and partner with Health, HR, and Sheriff's Office to protect sensitive information while supporting
Qualifications
- Minimum 5 years of related compliance and regulatory experience.
- Healthcare field experience with Compliance and/or Regulatory Affairs.
- Experience in data analytics and presenting data.
- Extensive familiarity with health care legislation and standards for patient privacy.
- Experience advancing health equity and collaborating with diverse populations.
Responsibilities
- Develop, implement, and maintain countywide privacy policies, procedures, standards, and guidelines.
- Monitor HIPAA and privacy requirements; evaluate legislation and industry practices.
- Conduct privacy impact assessments and risk assessments; coordinate remediation.
- Lead privacy incident response and coordinate with Technology Services and County Counsel.
- Create and deliver privacy training and awareness programs for departments.
Skills
Education
Tools
Job description
Clackamas County employees work to serve the public and enrich our community. Clackamas County is committed to building a community where people thrive, have a sense of safety, connection, and belonging, so that everyone is honored and celebrated for the richness in diversity they bring. We encourage applicants of diverse backgrounds and lived experience to apply.
Clackamas County employees work to serve the public and enrich our community. Clackamas County is committed to building a community where people thrive, have a sense of safety, connection, and belonging, so that everyone is honored and celebrated for the richness in diversity they bring. We encourage applicants of diverse backgrounds and lived experience to apply.
Clackamas County is in a prime location in the Portland, Oregon metropolitan area and is recognized nationally as one of the most livable areas in the United States. Located on the southern edge of the City of Portland and extending to the top of Mt. Hood, Clackamas County is part of a thriving region in the Northwest. It has a population of about 420,000 residents.
- SPIRIT: Our Core Values
- Explore Clackamas County
- Recreation, Arts & Heritage
The first application review will be on Tuesday, November 10, 2026. We reserve the right to close this recruitment at any time on or after that date.
Annual Pay Range: $ 96,108.46 - $ 126,523.81
Hourly Pay Range: $ 46.20 - $ 60.82
Salary offers will be made within the posted pay range and will be based on the candidate's experience (paid or unpaid) that is directly relevant to the position. This position is classified as a Senior Policy, Performance & Research Analyst.
Clackamas County seeks a strategic, analytical, and collaborative professional to serve as County Privacy Officer. This high-profile role will shape how the county collects, uses, stores, shares, and protects personal and confidential information. As the county’s Enterprise Privacy Officer and HIPAA Compliance Officer, you will strengthen privacy practices, support regulatory compliance, and develop a culture of accountability and trust.
The County Privacy Officer leads the development and implementation of the County’s enterprise privacy program, translating complex statutory and regulatory requirements into practical policies, procedures, and standards. Responsibilities include monitoring compliance with federal and state privacy requirements, evaluating emerging legislation, assessing privacy risks, conducting privacy impact assessments, and coordinating responses to suspected privacy incidents in partnership with Technology Services, County Counsel, and other stakeholders. The role also develops countywide privacy training and awareness programs adapted to departmental needs and risk levels.
Working across the organization, the County Privacy Officer advises executive leadership and collaborates with departments such as Health, Housing and Human Services, Human Resources, the Sheriff’s Office Jail, and the Medical Examiner’s Office to promote consistent privacy practices. Additional responsibilities include coordinating individual privacy rights requests, leading cross-departmental initiatives, developing program metrics, analyzing data, and preparing executive reports and policy recommendations to evaluate effectiveness and guide improvements.
The successful candidate will bring substantial healthcare compliance or regulatory experience, deep knowledge of healthcare privacy legislation and standards, and the ability to translate complex requirements into clear, actionable guidance. Strong analytical skills, experience presenting data, and sound judgment when advising leadership on sensitive issues are essential. The ability to build partnerships, communicate effectively, and influence practices across organizational boundaries is key to success.
This policy leadership role has a strong regulatory component and involves countywide data analysis and strategic planning. The County Privacy Officer will protect sensitive information, support informed decision-making, and help improve staff and public practices and systems.
Clackamas County is a hybrid covered entity under HIPAA, meaning the law applies to designated County components rather than the entire organization. The County Privacy Officer will help those components meet their obligations while supporting consistent privacy practices across the entire organization.
- A minimum of five (5) years of related compliance and/or regulatory experience that would provide the required knowledge and skills to perform the responsibilities of this position
- Experience in a health care-related field, including a role in Compliance and/or Regulatory Affairs
- Experience in data analytics and presentation of data
- Extensive familiarity with relevant health care legislation and standards for the protection of health information and patient privacy
- Experience in advancing health equity, addressing systemic health disparities, and collaborating with diverse, vulnerable, and underrepresented populations
- Bachelor's degree or higher in health information management or a related healthcare field
- Experience in the development, implementation, or management of an enterprise-wide privacy program.
- Experience interpreting and applying HIPAA Privacy, Security, and Breach Notification Rules and applicable state privacy laws.
- Experience conducting privacy impact assessments, risk assessments, or compliance audits and developing corrective action plans.
- Experience investigating privacy incidents or breaches and coordinating remediation.
- Experience developing and delivering privacy training or compliance education programs.
- Experience advising executive leadership on complex regulatory requirements, privacy risks, and policy decisions.
- Experience leading cross-functional initiatives and developing performance measures to evaluate program effectiveness.
- Possession of one or more of the following professional certifications:
- Certified in Healthcare Privacy and Security (CHPS)
- Certified in Healthcare Privacy Compliance (CHPC)
- Certified Information Privacy Professional (CIPP)
- Certified Information Privacy Manager (CIPM)
- Must pass a criminal history check, which may include a national or state fingerprint records check
- Driving is required for county business on a regular basis or to accomplish work. Incumbents must possess a valid driver's license and possess and maintain an acceptable driving record throughout the course of employment.
- For veterans qualified for Veterans' Preference: If you believe you have skills that would transfer well to this position and/or special qualifications that relate to this position, please list those skills and/or qualifications in the open-ended question at the end of the application and explain how those skills and/or qualifications relate to this position.
Duties may include, but are not limited to, the following:
Develop, implement, and maintain countywide privacy policies, procedures, standards, and guidelines. Interpret complex legal and regulatory requirements and translate them into practical operational practices aligned with County strategic goals and legal obligations.
Serve as the County’s HIPAA Compliance Officer and monitor compliance with HIPAA and applicable federal and state privacy requirements. Evaluate emerging legislation, regulatory guidance, and industry practices; assess potential impacts; and recommend policy or operational changes as needed.
Conduct and oversee privacy impact assessments and compliance reviews to identify risks associated with the collection, use, storage, sharing, retention, and disposal of sensitive information. Develop and recommend mitigation strategies and corrective actions to strengthen privacy protections.
Coordinate the investigation, documentation, remediation, and reporting of suspected privacy incidents and breaches in collaboration with Technology Services, County Counsel, and other stakeholders. Identify trends and recommend improvements to prevent recurrence and strengthen incident response practices.
Develop, deliver, and maintain mandatory privacy training and ongoing awareness programs for County employees and contractors. Create specialized training and guidance for departments with heightened privacy risks or unique regulatory requirements.
Serve as a strategic privacy advisor to executive leadership and County departments, including Health, Housing and Human Services, Human Resources, the Sheriff’s Office Jail, and the Medical Examiner’s Office. Promote consistent privacy practices, provide consultation on complex issues, and coordinate responses to individual privacy rights requests, including requests for access to or correction of personal information, as applicable.
Establish and track privacy program metrics, analyze data, evaluate program effectiveness, and prepare executive-level reports and recommendations. Lead cross-departmental initiatives requiring advanced research, policy analysis, strategic planning, and coordination to improve privacy governance and support continuous improvement.
This position is included in the County’s alternate workweek program, working 40 hours during a standard workweek of Monday through Thursday (Fridays off). Specific hours of work will be discussed with the candidate selected for this position at the time an offer of employment is extended.
This position is eligible for hybrid on-site/telework and based on the Department’s business needs. The exact amount of on-site/telework and schedule will be discussed with the hiring manager during time of offer. Telework locations cannot be located outside of Oregon or Washington. Washington residents must perform 50% of their time on-site at Clackamas County.
Clackamas County proudly offers an attractive compensation and benefits package, including competitive wages, cost-of-living adjustments, merit increases (for eligible employees), and a robust sick and vacation plan for regular-status employees.
We encourage and support employee health and wellness by offering health and wellness classes and events, as well as alternative care benefits, so you can customize your wellness needs to fit your lifestyle. Employee benefits become effective the first of the month following an employee’s date of hire.
- 16 hours of vacation accrual per month
- Eligible newly hired employees will have the one-time option to front-load their first year of vacation accruals! This means you have access to vacation leave at the time of hire.
- 8 hours of sick leave accrual per month
- 10 paid holidays and 1 personal day per year
- Membership in the Public Employees Retirement System (PERS)/Oregon Public Service Retirement Plan (OPSRP):
- Employer-paid 6% PERS retirement contribution (the county currently pays the employee’s share of the retirement contribution).
- A Choice of Medical Plans that include chiropractic coverage, alternative care, vision, and prescription drug coverage
- A Choice of Dental Plans
- Employee Assistance Program (EAP)
- Longevity pay
- Other retirement Savings Options that allow for additional retirement funds savings, including an option to contribute a portion of employee earnings on a pre or post-tax basis to a 457b Deferred Compensation Plan
- A variety of additional optional benefits (see link below for additional information)
This is a full-time, Non-Represented Group 2 county position
The County Administrator's Office works with the Board of County Commissioners to facilitate effective and quality service delivery in all county programs. The County Administrator serves as the Chief Executive Officer of the County and is responsible for providing overall direction to county departments and programs consistent with policy established by the Board of County Commissioners.
Learn more about Clackamas County Administration
Clackamas County is an Equal Opportunity Employer. We value diversity, equity, and inclusion as essential elements that create and foster a welcoming workplace. All qualified persons will be considered for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, political affiliation, disability, or any other factor unrelated to the essential functions of the job.
If you wish to identify yourself as a qualified person with a disability under the Americans with Disabilities Act and would like to request an accommodation, please address the request to the Department of Human Resources prior to the recruitment close date. You may request an accommodation during the online application process.
James Callahan, Recruiter
Email: JCallahan@clackamas.us
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
