Privacy Compliance Manager

Yale Corporation; New Haven (CT); Hybride; USD 68 000 - 121 000; Plein temps

Résumé du poste

Yale University is seeking a Privacy Compliance Manager who reports to the Chief Privacy Officer to ensure compliance with HIPAA, GDPR, and other privacy requirements across the University. The role includes contracting, training support, and guidance on privacy expectations for faculty, staff, students, and trainees.

The position supports centralized privacy functions, develops educational materials, and coordinates with Procurement and the Privacy Office to meet regulatory mandates.

Qualifications

• Bachelor’s degree in a relevant field with at least four years of related experience.
• Strong contract drafting, negotiation, and privacy regulatory knowledge.
• Excellent written and oral communication and organizational skills.

Responsabilités

• Review, develop, and negotiate contracts involving PII with data use agreements and DPAs.
• Manage Business Associate Agreements and coordinate with HIPAA Privacy Officer.
• Create training materials and guidance on privacy compliance for faculty, staff, and students.
• Serve as initial contact for HIPAA Privacy Office inquiries from Yale community and external sources.
• Maintain documentation of privacy incidents and breach determinations.
• Oversee compliance with privacy policies and document corrective actions.

Connaissances

Contract drafting

Negotiation

Privacy research

MS Office

Data privacy

Communication

Organization

Training coordination

Formation

Bachelor’s degree in a relevant field

Outils

Microsoft Office Suite

Database administration

Description du poste

Working at Yale means contributing to a better tomorrow. Whether you are a current resident of our New Haven-based community, eligible for opportunities through the New Haven Hiring Initiative, or a newcomer, interested in exploring all that Yale has to offer, your talents and contributions are welcome. Discover your opportunities at Yale!

Overview

Reporting to the Chief Privacy Officer, the Privacy Compliance Manager works to ensure compliance with federal, state, and University requirements related to the privacy of personally identifiable information (PII). The Privacy Compliance Manager provides contracting as well as training support to the Privacy Office, including review, negotiation, and management of HIPAA Business Associate Agreements and Data Transfer Agreements. Among other duties, the Privacy Compliance Manager provides guidance regarding privacy requirements and expectations to Yale faculty, staff, students, and trainees and keeps abreast of changes in University policy, as well as federal, state and international regulations, and will be a valuable and reliable resource to the privacy team and the University community.

This office operates on a hybrid schedule and will require 3 days in-office per week.

Please note that candidates advancing in the recruitment process will be asked to provide writing samples.

Required Skills and Abilities

• Contract drafting and negotiation skills; ability to research and learn about privacy-related legal requirements.Thorough working knowledge of PC-based tools including Microsoft Office Suite, database administration, and other related software.
• Excellent oral and written communication and interpersonal skills including ability to interact positively with a broad spectrum of individuals from patients to faculty members, as well as demonstrated organizational skills and analytic ability.
• Demonstrated superior and organized customer service coordination working with multiple stakeholders, i.e., administrators, patients, etc.
• Ability to have a high level of ethics and integrity in professional matters and sensitivity for confidentiality.
• Ability to work independently and exercise sound judgment, as well as ability to work well as part of a team and support others on the team. Ability to prioritize, problem-solve, and work under pressure without sacrificing accuracy or customer service.

Preferred Skills and Abilities

• J.D. or other advanced degree.
• Working knowledge of international, federal, and state privacy regulations, including the privacy of health information.

Principal Responsibilities

• Review, develop, and negotiate contracts involving personally identifiable information including data use agreements, GDPR standard contractual clauses, and data processing agreements in collaboration with the Chief Privacy Officer, Procurement, and the Office of Sponsored Projects. Provide feedback on acceptability of terms and recommend revisions. Provide guidance to the Yale community on completing data processing appendices.
• Review, develop, negotiate, and manage Business Associate Agreements (BAA) including submissions and initial review of proposed agreements. Refer substantive issues to the Chief HIPAA Privacy Officer as needed and coordinate with Procurement to obtain fully executed Business Associate Agreements that meet regulatory mandates and institutional standards. Maintain the Business Associate files and logs and ensure complete list of the current Business Associates is available to the Yale community on the HIPAA website. Monitor compliance with Business Associate requirements through outreach to Yale departments as well as active Business Associates.
• Facilitate privacy compliance across the University by managing centralized privacy functions. Utilizing knowledge of applicable federal and state regulations related to privacy, responsible for the creation of training materials and guidance for faculty, staff, and students regarding privacy compliance. Identify recurrent issues of University and federal requirements for privacy which are poorly understood and provide enhancements to existing educational materials to address gaps.
• Serve as initial contact person for the HIPAA Privacy Office. Respond to, resolve, or refer, as appropriate, inquiries to the Privacy Office from various sources both within and outside Yale University including patients, research investigators, research subjects, clinicians, students, employees, and administrators related to privacy matters.
• Assist with researching potential breaches and maintaining mandated documentation including an auditable record of incidents investigated under the HIPAA Breach Notification and other state and federal notice requirements. Maintain appropriate documentation of breach determinations. Assist in notification process.
• In conjunction with Chief Privacy Officer, oversee compliance with privacy policies and procedures. Appropriately document findings and determine reasonable corrective actions for any finding including guidance documents, revisions to documents and forms, or other measures.
• Maintain training records and privacy courses in the University’s learning management system including off-line courses. Respond to questions and concerns regarding training compliance requirements for the HIPAA Privacy and Security training and other privacy modules. Responsible for producing, distributing, and following up on training reports, upon request, for all HIPAA covered components of the University.
• Maintain the Yale HIPAA and Privacy Office websites and update as necessary to reflect changes in institutional practices and federal, state, or international privacy regulation.
• Other duties as assigned.

Required Education and Experience

Bachelor’s degree in relevant field and a minimum of four years related experience or the equivalent combination of education and experience.

Job Posting Date

10/29/2026

Job Category

Professional

Bargaining Unit

NON

Compensation Grade

Administration & Operations

Compensation Grade Profile

Manager; Program Leader (24)

Salary Range

$68,000.00 - $120,500.00

Benefits

A general description of the benefits to be offered with this Managerial & Professional position is available at:

Yale Benefits

Time Type

Full time

Duration Type

Staff

Work Model

Hybrid

Background Check Requirements

All candidates for employment will be subject to pre-employment background screening for this position, which may include motor vehicle, DOT certification, drug testing and credit checks basedon the position description and job requirements. All offers are contingent upon the successful completion of the background check. For additional information on the background check requirements and process visit "Learn about background checks" under the Applicant Support Resources section of Careers on the It's Your Yale website.

Health Requirements

Certain positions have associated health requirements based on specific job responsibilities. These may include vaccinations, tests, or examinations, as required by law, regulation, or university policy.

Posting Disclaimer

Salary offers are determined by a candidate’s qualifications, experience, skills, and education in relation to the position requirements, along with the role’s grade profile and current internal and external market conditions.

The intent of this job description is to provide a representative summary of the essential functions that will be required of the position and should not be construed as a declaration of specific duties and responsibilities of the position. Employees will be assigned specific job-related duties throughtheir hiring department.

The University is committed to basing judgments concerning the admission, education, and employment of individuals upon their qualifications and abilities and seeks to attract to its faculty, staff, and student body qualified persons from a broad range of backgrounds and perspectives. In accordance with this policy and as delineated by federal and Connecticut law, Yale does not discriminate in admissions, educational programs, or employment against any individual on account of that individual’s sex, sexual orientation, gender identity or expression, race, color, national or ethnic origin, religion, age, disability, status as a special disabled veteran, veteran of the Vietnam era or other covered veteran.

Inquiries concerning Yale's Policy Against Discrimination and Harassment may be referred to the Office of Institutional Equity and Accessibility (OIEA).

Note

Yale University is a tobacco-free campus.