Information Privacy Administrator

University of Utah; Salt Lake City (UT); Hybrid; USD 70,000 - 92,000; Full time

Job summary

The University of Utah is seeking an Information Privacy Administrator to ensure patient care, operations, and business practices align with HIPAA, the GDPA, and university policies. This role acts as a subject matter expert, guiding privacy strategy across units and managing investigations.

The position develops and maintains privacy policies, conducts audits, handles data subject requests, and delivers training to raise privacy awareness.

Qualifications

• Experience implementing HIPAA privacy rules and best practices.
• Familiarity with data protection regulations (GDPA preferred).
• Ability to develop and present privacy training materials.

Responsibilities

• Investigates information privacy and security incidents; documents findings and responses.
• Responds to policy violations and privacy law breaches.
• Conducts privacy compliance audits and reports results to leadership.
• Coordinates Business Associate Agreements and data access agreements.
• Develops and presents training materials on privacy topics.
• Promotes privacy awareness across multiple platforms.
• Supports patients, staff, faculty, and students; provides guidance and issue resolution.
• Responds to data subject requests.
• Attends strategic project teams to improve privacy processes.
• Develops and maintains privacy policies and guidelines.
• Keeps current on privacy laws and trends; suggests policy updates.

Skills

HIPAA

GDPA

Privacy by design

Investigations

Audits

Training

Data requests

Policy development

Job description

Job Summary

Information Privacy Administrator

Ensures patient care, operational workflows, and business practices align with HIPAA Privacy and Security regulations, the Utah Government Data Privacy Act ( GDPA ), organizational policies and procedures, and other applicable laws. Serves as a subject matter expert, driving cross-functional privacy strategies, managing complex investigations, and integrating privacy principles across university units.

Learn more about the great benefits of working for University of Utah: benefits.utah.edu

The department may choose to hire at any of the below job levels and associated pay rates based on their business need and budget.

Responsibilities

Information Privacy Manager

1. Conducts investigations related to information privacy and security incidents. Clearly and accurately documents investigation, findings, analyses, and response activities.

2. Takes appropriate steps to respond to and report violations of applicable policy and privacy laws.

3. Conducts privacy compliance audits and prepares written and oral reports on these audits for leadership.

4. Coordinates the implementation of Business Associate Agreements and other relevant data access agreements.

5. Develops and presents training materials related to information privacy and security topics.

6. Promotes information privacy and security awareness through multiple platforms.

7. Supports patients, staff, faculty, and students by responding to questions, providing guidance, and facilitating issue resolution.

8. Responds to and facilitates data subject requests.

9. Participates on strategic project teams to develop and implement improvements related to information privacy.

10. Develops and maintains privacy policies, procedures, and guidelines based on best practices, compliance requirements, and operational needs.

11. Maintains current knowledge of privacy laws and trends. Analyzes the need for updates to policies, processes, or guidance due to emerging issues.

This is a Developing-Level position in the General Professional track.

Job Code: P21982

Grade: P17

Expected Pay Range: $70,000-$92,000

Information Privacy Administrator

1. Conducts investigations related to information privacy and security incidents. Clearly and accurately documents investigation, findings, analyses, and response activities.

2. Takes appropriate steps to respond to and report violations of applicable policy and privacy laws.

3. Conducts privacy compliance audits and prepares written and oral reports on these audits for leadership.

4. Coordinates the implementation of Business Associate Agreements and other relevant data access agreements.

5. Develops and presents training materials related to information privacy and security topics.

6. Promotes information privacy and security awareness through multiple platforms.

7. Supports patients, staff, faculty, and students by responding to questions, providing guidance, and facilitating issue resolution.

8. Responds to and facilitates data subject requests.

9. Participates on strategic project teams to develop and implement improvements related to information privacy.

10. Develops and maintains privacy policies, procedures, and guidelines based on best practices, compliance requirements, and operational needs.

11. Maintains current knowledge of privacy laws and trends. Analyzes the need for updates to policies, processes, or guidance due to emerging issues.

This is a Career-Level position in the General Professional track.

Job Code: P21983

Grade: P18

Expected Pay Range: $75,000-$101, 000

Information Privacy Administrator, Sr.

• Conducts audits and assessments of data handling processes.

• Independently identifies and resolves complex privacy issues or gaps.

• Develops and executes privacy initiatives and process improvements.

• Provides leadership, direction, and support to staff and/or external customers.

• Participates in and leads strategic projects with internal and external stakeholders to support compliance and improve

processes.

• Conducts investigations into high-risk privacy incidents, breaches, and data subject complaints.

• Conducts Privacy Impact Assessments to identify privacy risks, recommend actions to mitigate risks, and incorporate Privacy by

Design into new processes and products.

• Maintains proficient knowledge regarding federal and state privacy requirements, and their impact on organizational needs and

workflows.

• Creates and administers enterprise-wide and role-based training and education to enhance privacy awareness.

• Serves as an expert resource in privacy issue analysis and resolution.

• Serves as a mentor to other privacy team members.

Requires a bachelor’s (or equivalency) + 8 years or a master’s (or equivalency) + 6 years of directly related work experience.

This is an Advanced-Level position in the General Professional track.

Job Code: P21984

Grade: P19

Expected Pay Range: $82,000 – $112,000

Minimum Qualifications

EQUIVALENCY STATEMENT : 1 year of higher education can be substituted for 1 year of directly related work experience (Example: bachelor’s degree = 4 years of directly related work experience).

Department may hire employee at one of the following job levels:

Information Privacy Manager : Requires a bachelor’s (or equivalency) + 4 years or a master’s (or equivalency) + 2 years of directly related work experience.

Information Privacy Administrator : Requires a bachelor’s (or equivalency) + 6 years or a master’s (or equivalency) + 4 years of directly related work experience.

Information Privacy Administrator, Sr. : Requires a bachelor’s (or equivalency) + 8 years or a master’s (or equivalency) + 6 years of directly related work experience.

Preferences

Information Privacy Manager/Administrator

• Experience in health care operations

• Experience in information privacy, cyber security, information technology, or regulatory compliance

• Related certifications (e.g., ISACA , CHPC , CIPP , CIPT )

Information Privacy Administrator, Sr. IV

• Master’s degree in healthcare, legal, or IT related fields is preferred. Experience in

healthcare, information security, information technology, data governance, or artificial

intelligence. CIPP , CISSP , CIMP , or other privacy/security certifications are desired.

Type Benefited Staff

Special Instructions Summary

Additional Information

The University is a participating employer with Utah Retirement Systems (“URS”). Eligible new hires with prior URS service, may elect to enroll in URS if they make the election before they become eligible for retirement (usually the first day of work). Contact Human Resources at [phone] for information. Individuals who previously retired and are receiving monthly retirement benefits from URS are subject to URS’ post-retirement rules and restrictions. Please contact Utah Retirement Systems at [phone] or [phone] or University Human Resource Management at [phone] if you have questions regarding the post-retirement rules.

This position may require the successful completion of a criminal background check and/or drug screen.

The University of Utah values candidates who have experience working in settings with students and possess a strong commitment to improving access to higher education.

Veterans’ preference is extended to qualified applicants, upon request and consistent with University policy and Utah state law. Upon request, reasonable accommodations in the application process will be provided to individuals with disabilities.

Consistent with state and federal law, the University of Utah does not discriminate based upon race, ethnicity, color, religion, national origin, age, disability, sex, sexual orientation, gender, gender identity, gender expression, pregnancy, pregnancy-related conditions, genetic information, or protected veteran’s status. The University does not discriminate on the basis of sex in the education program or activity that it operates, as required by Title IX and 34 CFR part 106. The requirement not to discriminate in education programs or activities extends to admission and employment. Inquiries about the application of Title IX and its regulations may be referred to the Title IX Coordinator, to the Department of Education, Office for Civil Rights, or both.

To request a reasonable accommodation for a disability or if you or someone you know has experienced discrimination or sexual misconduct including sexual harassment, you may contact the Director/Title IX Coordinator in the Office of Equal Opportunity and Title IX ( OEO ). More information, including the Director/Title IX Coordinator’s office address, electronic mail address, and telephone number can be located at the:University of Utah Non‑Discrimination page.
Online reports may be submitted athttps://oeo.utah.edu

**https://publicsafety.utah.edu/safetyreport/**This report includes statistics about criminal offenses, hate crimes, arrests and referrals for disciplinary action, and Violence Against Women Act offenses. They also provide information about safety and security-related services offered by the University of Utah. A paper copy can be obtained by request at the Department of Public Safety located at 1658 East 500 South.
As perUniversity of Utah policy 5-108: Transfer of Benefits Eligible Staff Members, a new hire to the University of Utah who is still serving a 12 month probationary period will not be hired into another University of Utah job (a transfer) until the successful completion of the probationary period.