Information Privacy Administrator

University of Utah; Salt Lake City (UT); On-site; USD 70,000 - 112,000; Full time

Job summary

University of Utah invites applications for an Information Privacy Administrator. The role ensures privacy and security practices align with HIPAA, the Utah GDPA, and university policies, acting as a subject-matter expert across units.

Develops training and awareness, conducts investigations, and supports data subject requests. Pay ranges vary by level; campus location is on-site with standard M-F hours.

Qualifications

• Bachelor's degree or higher required (equivalency allowed).
• Relevant certifications or experience in information privacy and security are valued.
• Experience in healthcare or university privacy programs is a plus.

Responsibilities

• Conduct investigations related to information privacy and security incidents with clear documentation.
• Respond to violations of privacy policies and laws.
• Perform privacy compliance audits and report findings to leadership.
• Coordinate Business Associate Agreements and data access agreements.
• Develop and present privacy training materials for staff and students.

Skills

HIPAA privacy

Privacy investigations

Audits & compliance

Training development

Education

Bachelor's degree

Master's degree preferred

Job description

Information Privacy Administrator

Ensures patient care, operational workflows, and business practices align with HIPAA Privacy and Security regulations, the Utah Government Data Privacy Act (GDPA), organizational policies and procedures, and other applicable laws. Serves as a subject matter expert, driving cross-functional privacy strategies, managing complex investigations, and integrating privacy principles across university units.

Job Summary

Ensures patient care, operational workflows, and business practices align with HIPAA Privacy and Security regulations, the Utah Government Data Privacy Act (GDPA), organizational policies and procedures, and other applicable laws. Serves as a subject matter expert, driving cross-functional privacy strategies, managing complex investigations, and integrating privacy principles across university units.

Learn more about the great benefits of working for University of Utah: benefits.utah.edu

The department may choose to hire at any of the below job levels and associated pay rates based on their business need and budget.

Responsibilities (Information Privacy Manager)

• Conducts investigations related to information privacy and security incidents. Clearly and accurately documents investigation, findings, analyses, and response activities.
• Takes appropriate steps to respond to and report violations of applicable policy and privacy laws.
• Conducts privacy compliance audits and prepares written and oral reports on these audits for leadership.
• Coordinates the implementation of Business Associate Agreements and other relevant data access agreements.
• Develops and presents training materials related to information privacy and security topics.
• Promotes information privacy and security awareness through multiple platforms.
• Supports patients, staff, faculty, and students by responding to questions, providing guidance, and facilitating issue resolution.
• Responds to and facilitates data subject requests.
• Participates on strategic project teams to develop and implement improvements related to information privacy.
• Develops and maintains privacy policies, procedures, and guidelines based on best practices, compliance requirements, and operational needs.
• Maintains current knowledge of privacy laws and trends. Analyzes the need for updates to policies, processes, or guidance due to emerging issues.

This is a Developing-Level position in the General Professional track. Job Code: P21982 Grade: P17 Expected Pay Range: $70,000-$92,000

Responsibilities (Information Privacy Administrator)

• Conducts investigations related to information privacy and security incidents. Clearly and accurately documents investigation, findings, analyses, and response activities.
• Takes appropriate steps to respond to and report violations of applicable policy and privacy laws.
• Conducts privacy compliance audits and prepares written and oral reports on these audits for leadership.
• Coordinates the implementation of Business Associate Agreements and other relevant data access agreements.
• Develops and presents training materials related to information privacy and security topics.
• Promotes information privacy and security awareness through multiple platforms.
• Supports patients, staff, faculty, and students by responding to questions, providing guidance, and facilitating issue resolution.
• Responds to and facilitates data subject requests.
• Participates on strategic project teams to develop and implement improvements related to information privacy.
• Develops and maintains privacy policies, procedures, and guidelines based on best practices, compliance requirements, and operational needs.
• Maintains current knowledge of privacy laws and trends. Analyzes the need for updates to policies, processes, or guidance due to emerging issues.

This is a Career-Level position in the General Professional track. Job Code: P21983 Grade: P18 Expected Pay Range: $75,000-$101, 000

Responsibilities (Information Privacy Administrator, Sr.)

• Conducts audits and assessments of data handling processes.
• Independently identifies and resolves complex privacy issues or gaps.
• Develops and executes privacy initiatives and process improvements.
• Provides leadership, direction, and support to staff and/or external customers.
• Participates in and leads strategic projects with internal and external stakeholders to support compliance and improve
• Conducts investigations into high-risk privacy incidents, breaches, and data subject complaints.
• Conducts Privacy Impact Assessments to identify privacy risks, recommend actions to mitigate risks, and incorporate Privacy by
• Maintains proficient knowledge regarding federal and state privacy requirements, and their impact on organizational needs and
• Creates and administers enterprise-wide and role-based training and education to enhance privacy awareness.
• Serves as an expert resource in privacy issue analysis and resolution.
• Serves as a mentor to other privacy team members. Requires a bachelor's (or equivalency) + 8 years or a master's (or equivalency) + 6 years of directly related work experience.

This is an Advanced-Level position in the General Professional track. Job Code: P21984 Grade: P19 Expected Pay Range: $82,000 - $112,000

Minimum Qualifications

EQUIVALENCY STATEMENT: 1 year of higher education can be substituted for 1 year of directly related work experience (Example: bachelor's degree = 4 years of directly related work experience).

Department may hire employee at one of the following job levels:

• Information Privacy Manager : Requires a bachelor's (or equivalency) + 4 years or a master's (or equivalency) + 2 years of directly related work experience.
• Information Privacy Administrator : Requires a bachelor's (or equivalency) + 6 years or a master's (or equivalency) + 4 years of directly related work experience.
• Information Privacy Administrator, Sr. : Requires a bachelor's (or equivalency) + 8 years or a master's (or equivalency) + 6 years of directly related work experience.

Preferences

• Experience in health care operations
• Experience in information privacy, cyber security, information technology, or regulatory compliance
• Related certifications (e.g., ISACA, CHPC, CIPP, CIPT)

Information Privacy Administrator, Sr. IV

• Master's degree in healthcare, legal, or IT related fields is preferred. Experience in
• healthcare, information security, information technology, data governance, or artificial intelligence. CIPP, CISSP, CIMP, or other privacy/security certifications are desired.

Special Instructions

Requisition Number: PRN46210B

Full Time or Part Time?: Full Time

Work Schedule Summary: M-F 8:00-5:00

Department: 01663 - COMPLIANCE SERVICES

Location: Campus

Pay Rate Range: $70,000-$112,000

Close Date: 12/14/2026

Open Until Filled