Privacy Compliance Manager

Yale University; New Haven (CT); Híbrido; USD 68.000 - 121.000; Jornada completa

Descripción de la vacante

Yale University is seeking a Privacy Compliance Manager to ensure compliance with federal, state, and university privacy requirements for PII, including drafting and negotiating BAAs and data processing agreements. The role supports the Privacy Office with training materials and governance updates.

This hybrid position requires a bachelor’s degree and at least four years of related experience, plus strong writing, contract, and program management skills to coordinate with faculty, staff, and

Formación

• Contract drafting and negotiation skills; ability to research privacy-related legal requirements.
• Excellent oral and written communication and interpersonal skills.
• Ability to work independently and as part of a team with multiple stakeholders.

Responsabilidades

• Review, develop, and negotiate contracts involving personally identifiable information including data use agreements, GDPR standard contractual clauses, and data processing agreements in collaboration with the Chief Privacy Officer, Procurement, and the Office of Sponsored Projects. Provide feedback on acceptability of terms and recommend revisions. Provide guidance to the Yale community on completing data processing appendices.
• Review, develop negotiate, and manage Business Associate Agreements (BAA) including submissions and initial review of proposed agreements. Refer substantive issues to the Chief HIPAA Privacy Officer as needed and coordinate with Procurement to obtain fully executed Business Associate Agreements that meet regulatory mandates and institutional standards. Maintain the Business Associate files and logs and ensure complete list of the current Business Associates is available to the Yale community on the HIPAA website. Monitor compliance with Business Associate requirements through outreach to Yale departments as well as active Business Associates.
• Facilitate privacy compliance across the University by managing centralized privacy functions. Utilizing knowledge of applicable federal and state regulations related to privacy, responsible for the creation of training materials and guidance for faculty, staff, and students regarding privacy compliance. Identify recurrent issues of University and federal requirements for privacy which are poorly understood and provide enhancements to existing educational materials to address gaps.
• Serve as initial contact person for the HIPAA Privacy Office. Respond to, resolve, or refer, as appropriate, inquiries to the Privacy Office from various sources both within and outside Yale University including patients, research investigators, research subjects, clinicians, students, employees, and administrators related to privacy matters.
• Assist with researching potential breaches and maintaining mandated documentation including an auditable record of incidents investigated under the HIPAA Breach Notification and other state and federal notice requirements. Maintain appropriate documentation of breach determinations. Assist in notification process.
• In conjunction with Chief Privacy Officer, oversee compliance with privacy policies and procedures. Appropriately document findings and determine reasonable corrective actions for any finding including guidance documents, revisions to documents and forms, or other measures.

Conocimientos

Contract drafting

Negotiation

Communication skills

Interpersonal skills

Ethics and confidentiality

Independent & team work

Educación

Bachelor’s degree in relevant field

JD or advanced degree (preferred)

Herramientas

Microsoft Office Suite

Database software

Descripción del empleo

Working at Yale means contributing to a better tomorrow. Whether you are a current resident of our New Haven-based community, eligible for opportunities through the New Haven Hiring Initiative, or a newcomer, interested in exploring all that Yale has to offer, your talents and contributions are welcome. Discover your opportunities at Yale!

Overview

Reporting to the Chief Privacy Officer, the Privacy Compliance Manager works to ensure compliance with federal, state, and University requirements related to the privacy of personally identifiable information (PII). The Privacy Compliance Manager provides contracting as well as training support to the Privacy Office, including review, negotiation, and management of HIPAA Business Associate Agreements and Data Transfer Agreements. Among other duties, the Privacy Compliance Manager provides guidance regarding privacy requirements and expectations to Yale faculty, staff, students, and trainees and keeps abreast of changes in University policy, as well as federal, state and international regulations, and will be a valuable and reliable resource to the privacy team and the University community.

This office operates on a hybrid schedule and will require 3 days in-office per week.

Please note that candidates advancing in the recruitment process will be asked to provide writing samples.

Required Skills And Abilities

• Contract drafting and negotiation skills; ability to research and learn about privacy-related legal requirements. Thorough working knowledge of PC-based tools including Microsoft Office Suite, database administration, and other related software.
• Excellent oral and written communication and interpersonal skills including ability to interact positively with a broad spectrum of individuals from patients to faculty members, as well as demonstrated organizational skills and analytic ability.
• Demonstrated superior and organized customer service coordination working with multiple stakeholders, i.e., administrators, patients, etc.
• Ability to have a high level of ethics and integrity in professional matters and sensitivity for confidentiality.
• Ability to work independently and exercise sound judgment, as well as ability to work well as part of a team and support others on the team. Ability to prioritize, problem-solve, and work under pressure without sacrificing accuracy or customer service.

Preferred Skills And Abilities

• J.D. or other advanced degree.
• Working knowledge of international, federal, and state privacy regulations, including the privacy of health information.

Principal Responsibilities

• Review, develop, and negotiate contracts involving personally identifiable information including data use agreements, GDPR standard contractual clauses, and data processing agreements in collaboration with the Chief Privacy Officer, Procurement, and the Office of Sponsored Projects. Provide feedback on acceptability of terms and recommend revisions. Provide guidance to the Yale community on completing data processing appendices.
• Review, develop negotiate, and manage Business Associate Agreements (BAA) including submissions and initial review of proposed agreements. Refer substantive issues to the Chief HIPAA Privacy Officer as needed and coordinate with Procurement to obtain fully executed Business Associate Agreements that meet regulatory mandates and institutional standards. Maintain the Business Associate files and logs and ensure complete list of the current Business Associates is available to the Yale community on the HIPAA website. Monitor compliance with Business Associate requirements through outreach to Yale departments as well as active Business Associates.
• Facilitate privacy compliance across the University by managing centralized privacy functions. Utilizing knowledge of applicable federal and state regulations related to privacy, responsible for the creation of training materials and guidance for faculty, staff, and students regarding privacy compliance. Identify recurrent issues of University and federal requirements for privacy which are poorly understood and provide enhancements to existing educational materials to address gaps.
• Serve as initial contact person for the HIPAA Privacy Office. Respond to, resolve, or refer, as appropriate, inquiries to the Privacy Office from various sources both within and outside Yale University including patients, research investigators, research subjects, clinicians, students, employees, and administrators related to privacy matters.
• Assist with researching potential breaches and maintaining mandated documentation including an auditable record of incidents investigated under the HIPAA Breach Notification and other state and federal notice requirements. Maintain appropriate documentation of breach determinations. Assist in notification process.
• In conjunction with Chief Privacy Officer, oversee compliance with privacy policies and procedures. Appropriately document findings and determine reasonable corrective actions for any finding including guidance documents, revisions to documents and forms, or other measures.
• Maintain training records and privacy courses in the University’s learning management system including off-line courses. Respond to questions and concerns regarding training compliance requirements for the HIPAA Privacy and Security training and other privacy modules. Responsible for producing, distributing, and following up on training reports, upon request, for all HIPAA covered components of the University.
• Maintain the Yale HIPAA and Privacy Office websites and update as necessary to reflect changes in institutional practices and federal, state, or international privacy regulation.
• Other duties as assigned. Required Education and Experience Bachelor’s degree in relevant field and a minimum of four years related experience or the equivalent combination of education and experience.

Job Posting Date

10/29/2026

Job Category

Professional

Bargaining Unit

NON

Compensation Grade

Administration & Operations

Compensation Grade Profile

Manager; Program Leader (24)

Salary Range

$68,000.00 - $120,500.00

Benefits

A general description of the benefits to be offered with this Managerial & Professional position is available at:

Yale Benefits

Time Type

Full time

Duration Type

Staff

Work Model

Hybrid

Background Check Requirements

All candidates for employment will be subject to pre-employment background screening for this position, which may include motor vehicle, DOT certification, drug testing and credit checks based on the position description and job requirements. All offers are contingent upon the successful completion of the background check. For additional information on the background check requirements and process visit "Learn about background checks" under the Applicant Support Resources section of Careers on the It's Your Yale website.

Health Requirements

Certain positions have associated health requirements based on specific job responsibilities. These may include vaccinations, tests, or examinations, as required by law, regulation, or university policy.

Posting Disclaimer

Salary offers are determined by a candidate’s qualifications, experience, skills, and education in relation to the position requirements, along with the role’s grade profile and current internal and external market conditions.

The intent of this job description is to provide a representative summary of the essential functions that will be required of the position and should not be construed as a declaration of specific duties and responsibilities of the position. Employees will be assigned specific job-related duties through their hiring department.

The University is committed to basing judgments concerning the admission, education, and employment of individuals upon their qualifications and abilities and seeks to attract to its faculty, staff, and student body qualified persons from a broad range of backgrounds and perspectives. In accordance with this policy and as delineated by federal and Connecticut law, Yale does not discriminate in admissions, educational programs, or employment against any individual on account of that individual’s sex, sexual orientation, gender identity or expression, race, color, national or ethnic origin, religion, age, disability, status as a special disabled veteran, veteran of the Vietnam era or other covered veteran.

Inquiries concerning Yale's Policy Against Discrimination and Harassment may be referred to the Office of Institutional Equity and Accessibility (OIEA).

Note

Yale University is a tobacco-free campus.